86109d4b7366539f835dc5e091e083b3_JaffaCakes118

General

Target
86109d4b7366539f835dc5e091e083b3_JaffaCakes118
Size 2.8MB
Sample240810-pq5tfstdnb
SHA256 8d0171f371dc3318b1bbb754c79b430b404cd309f512173b297d72dd2c9fea1d
MD5 86109d4b7366539f835dc5e091e083b3
SHA1 8f144dc1993cb52778db11f8024cc0ebbd1f6b27
SHA512 b9345b5db48c0478caddf2971519bec8087644a7c5979de18d82215a8a0db3ddd17e3f41f29a99db9a0f973380f5526338713f684fa8a4941e7946308268682d
SSDEEP 3072:xCGhO3Qka4UC6swWFrggA0HkFkSh2wgtskiFKQTnrbk/zwWq/da/LV+GTtX471aQ:kMra8TIFHztkROIAeF87x27Q9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86109d4b7366539f835dc5e091e083b3_JaffaCakes118

File Explorer

86109d4b7366539f835dc5e091e083b3_JaffaCakes118

.exe 2.8MB

86109d4b7366539f835dc5e091e083b3_JaffaCakes118

IMPHASH 54a22b939f99905a0f875417cc6ac606
SHA256 8d0171f371dc3318b1bbb754c79b430b404cd309f512173b297d72dd2c9fea1d
MD5 86109d4b7366539f835dc5e091e083b3
SHA1 8f144dc1993cb52778db11f8024cc0ebbd1f6b27
SHA512 b9345b5db48c0478caddf2971519bec8087644a7c5979de18d82215a8a0db3ddd17e3f41f29a99db9a0f973380f5526338713f684fa8a4941e7946308268682d
SSDEEP 3072:xCGhO3Qka4UC6swWFrggA0HkFkSh2wgtskiFKQTnrbk/zwWq/da/LV+GTtX471aQ:kMra8TIFHztkROIAeF87x27Q9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5616

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr ord696 __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni ord628 __vbaStrCat __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj __vbaVargVarCopy _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i ord598 __vbaCyStr _CIsin ord631 __vbaErase ord632 __vbaVarZero __vbaChkstk EVENT_SINK_AddRef __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall ord563 __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode ord713 _adj_fprem _adj_fdivr_m64 __vbaI2Str ord608 __vbaFPException ord717 __vbaStrVarVal __vbaUbound __vbaVarCat ord537 ord644 _CIlog __vbaErrorOverflow __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaStrToAnsi __vbaAryVarVarg __vbaFpI4 _CIatan __vbaAryCopy __vbaStrMove _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

86109d4b7366539f835dc5e091e083b3_JaffaCakes118

msvbvm60

generic