88d41f447f41db246c31deb1e3b3fd0b_JaffaCakes118

General

Target
88d41f447f41db246c31deb1e3b3fd0b_JaffaCakes118
Size 444KB
Sample240811-d2p2latajj
SHA256 2996036f928c852bdf6f30a76719a0f0fb58908dc4ed202a7060dda00b4b57a9
MD5 88d41f447f41db246c31deb1e3b3fd0b
SHA1 51a4dfcbde4b447c30b6ab7d2ed51b27456b6bd7
SHA512 14b039f675b5ff8eeba538ecf5678ef04cf7d515ec50f147ff279274a71e403cb81d3376d1bd3954be03d468ba5c8130d744520157c7661b8e7468b4eb134a12
SSDEEP 6144:o21PfXX7F7WZttzpAwh9FIlLovEBxKd3Vsi2UkrJCLU25LxqVPFIadBY3XitWC:F1VQj9XEuYWA042bopi5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88d41f447f41db246c31deb1e3b3fd0b_JaffaCakes118

File Explorer

88d41f447f41db246c31deb1e3b3fd0b_JaffaCakes118

.exe 444KB

88d41f447f41db246c31deb1e3b3fd0b_JaffaCakes118

IMPHASH af8fc58ea171a77652c44607e95f5da2
SHA256 2996036f928c852bdf6f30a76719a0f0fb58908dc4ed202a7060dda00b4b57a9
MD5 88d41f447f41db246c31deb1e3b3fd0b
SHA1 51a4dfcbde4b447c30b6ab7d2ed51b27456b6bd7
SHA512 14b039f675b5ff8eeba538ecf5678ef04cf7d515ec50f147ff279274a71e403cb81d3376d1bd3954be03d468ba5c8130d744520157c7661b8e7468b4eb134a12
SSDEEP 6144:o21PfXX7F7WZttzpAwh9FIlLovEBxKd3Vsi2UkrJCLU25LxqVPFIadBY3XitWC:F1VQj9XEuYWA042bopi5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaStrVarMove ord696 __vbaEnd __vbaFreeVarList _adj_fdiv_m64 _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i _CIsin ord632 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaI2I4 DllFunctionCall __vbaFpUI1 __vbaRedimPreserve _adj_fpatan __vbaStrR8 __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaVarMul __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaVarDiv __vbaI2Str __vbaFailedFriend ord608 __vbaFPException __vbaStrVarVal __vbaVarCat _CIlog __vbaErrorOverflow __vbaNew2 __vbaR8Str _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaVarAdd __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaFpI4 _CIatan __vbaStrMove __vbaStrVarCopy _allmul __vbaLenVarB _CItan __vbaFPInt __vbaAryUnlock _CIexp ord580 __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

88d41f447f41db246c31deb1e3b3fd0b_JaffaCakes118

msvbvm60

generic