886a3d9396150f22f3431dc908a1d4f8_JaffaCakes118

General

Target
886a3d9396150f22f3431dc908a1d4f8_JaffaCakes118
Size 508KB
Sample240811-bk9cssxgqq
SHA256 e92ee304f71e15ee4bcde461d155cd23a0c60a07d88089bbd022684734da3bd5
MD5 886a3d9396150f22f3431dc908a1d4f8
SHA1 703d3b343c98947327b9db73e904c5118e8b9293
SHA512 a77fd32d2d3c5ea1a8a2f2bdbcf24e95d376d34aed2a39b6ae1f02136dfdd897886aeb7e8b8381fcfe124d779f92895599d425ce285e64533400c9323e0422f5
SSDEEP 12288:7vKSboFuCmoP+FVqRGKsAkbcrZUe01ZJP8:7CSJaWFUUKznrSX1ZC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
886a3d9396150f22f3431dc908a1d4f8_JaffaCakes118

File Explorer

886a3d9396150f22f3431dc908a1d4f8_JaffaCakes118

.exe 508KB

886a3d9396150f22f3431dc908a1d4f8_JaffaCakes118

IMPHASH 8bbe56be552e64d1269338e4dd3da9ff
SHA256 e92ee304f71e15ee4bcde461d155cd23a0c60a07d88089bbd022684734da3bd5
MD5 886a3d9396150f22f3431dc908a1d4f8
SHA1 703d3b343c98947327b9db73e904c5118e8b9293
SHA512 a77fd32d2d3c5ea1a8a2f2bdbcf24e95d376d34aed2a39b6ae1f02136dfdd897886aeb7e8b8381fcfe124d779f92895599d425ce285e64533400c9323e0422f5
SSDEEP 12288:7vKSboFuCmoP+FVqRGKsAkbcrZUe01ZJP8:7CSJaWFUUKznrSX1ZC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

24814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaGosubReturn __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct _adj_fdiv_m16i _adj_fdivr_m16i _CIsin ord631 __vbaErase ord632 __vbaVarZero __vbaChkstk __vbaGosubFree __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaRedim __vbaRecUniToAnsi __vbaUI1I2 _CIsqrt __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI4 ord616 _CIatan __vbaStrMove ord618 __vbaUI1Str __vbaStrVarCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

886a3d9396150f22f3431dc908a1d4f8_JaffaCakes118

msvbvm60

generic