89c89286a795b438b7424962312f8ebc_JaffaCakes118

General

Target
89c89286a795b438b7424962312f8ebc_JaffaCakes118
Size 1.2MB
Sample240811-k22tqatamn
SHA256 eccfcafc1fe70b35ae9ed1e5a1e31febc0c53b5d833f071777849a91011f4714
MD5 89c89286a795b438b7424962312f8ebc
SHA1 5a00ffb2fd3eee2c826727f50b8d08502052f877
SHA512 33613ee4b21d93ea7c94b2f2495064ca02ef22a0a9fdd4d69b81a94db827dae48815b0c827b2ec60216f8297a10acb3f5d48bdb7653d14ef07bd9fd075fa9b75
SSDEEP 3072:ipBRXs+JRSQi86FyUg7SWAOP/6MSRN/j7OnIca+V5OYiGChrPQ0v2e76vAFocDo1:T0aK4nuNmhLGmz4Q0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89c89286a795b438b7424962312f8ebc_JaffaCakes118

File Explorer

89c89286a795b438b7424962312f8ebc_JaffaCakes118

.exe 1.2MB

89c89286a795b438b7424962312f8ebc_JaffaCakes118

IMPHASH 48159b5e39a7fd4e3c3178703109db2f
SHA256 eccfcafc1fe70b35ae9ed1e5a1e31febc0c53b5d833f071777849a91011f4714
MD5 89c89286a795b438b7424962312f8ebc
SHA1 5a00ffb2fd3eee2c826727f50b8d08502052f877
SHA512 33613ee4b21d93ea7c94b2f2495064ca02ef22a0a9fdd4d69b81a94db827dae48815b0c827b2ec60216f8297a10acb3f5d48bdb7653d14ef07bd9fd075fa9b75
SSDEEP 3072:ipBRXs+JRSQi86FyUg7SWAOP/6MSRN/j7OnIca+V5OYiGChrPQ0v2e76vAFocDo1:T0aK4nuNmhLGmz4Q0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove ord696 __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni ord628 __vbaStrCat __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad _CIsin ord631 __vbaErase __vbaVarZero ord632 __vbaChkstk ord526 EVENT_SINK_AddRef __vbaStrCmp __vbaAryConstruct2 DllFunctionCall _adj_fpatan __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 ord712 _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException __vbaUbound __vbaStrVarVal __vbaVarCat ord537 ord644 _CIlog __vbaNew2 __vbaInStr __vbaR8Str _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaVarDup __vbaFpI4 _CIatan __vbaAryCopy __vbaUI1Str __vbaStrMove ord619 _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaI4ErrVar __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

89c89286a795b438b7424962312f8ebc_JaffaCakes118

msvbvm60

generic