8bfba2880378f63934268b3f83bb9c3d_JaffaCakes118

General

Target
8bfba2880378f63934268b3f83bb9c3d_JaffaCakes118
Size 204KB
Sample240811-zzry3asenh
SHA256 9002a0845a7cda3125d8868c3b1ecde4bde574adff1fe6386c46e2dc4c927420
MD5 8bfba2880378f63934268b3f83bb9c3d
SHA1 3d9872f51e5fed46e861a979de1d1a713ca6d1e7
SHA512 999fc3b24f80a07d9aacfa7bfcb71b1cf11ac1d6a5597cb0b9db93c86b192c6ab63cea575b075249e9e10c8a2769656572377dd69cd5344ffc752465280f77d9
SSDEEP 3072:40rDs/TGmfxaJFlJBrDs/TGmfxaJFlJkesfrDs/TGmfx+JFlJ0:4v7GBW7GBIY7Gb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bfba2880378f63934268b3f83bb9c3d_JaffaCakes118

File Explorer

8bfba2880378f63934268b3f83bb9c3d_JaffaCakes118

.exe 204KB

8bfba2880378f63934268b3f83bb9c3d_JaffaCakes118

IMPHASH 78c79090f66839a0986334cd8350614f
SHA256 9002a0845a7cda3125d8868c3b1ecde4bde574adff1fe6386c46e2dc4c927420
MD5 8bfba2880378f63934268b3f83bb9c3d
SHA1 3d9872f51e5fed46e861a979de1d1a713ca6d1e7
SHA512 999fc3b24f80a07d9aacfa7bfcb71b1cf11ac1d6a5597cb0b9db93c86b192c6ab63cea575b075249e9e10c8a2769656572377dd69cd5344ffc752465280f77d9
SSDEEP 3072:40rDs/TGmfxaJFlJBrDs/TGmfxaJFlJkesfrDs/TGmfx+JFlJ0:4v7GBW7GBIY7Gb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5236

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaPut3 __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaVarForInit __vbaExitProc __vbaObjSet __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i ord598 _CIsin __vbaErase ord632 __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaAryConstruct2 __vbaI2I4 DllFunctionCall _adj_fpatan EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord712 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaStrVarVal __vbaUbound _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord648 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaVarAdd __vbaVarDup __vbaStrToAnsi __vbaVarMod ord616 _CIatan __vbaCastObj __vbaStrMove _allmul _CItan __vbaVarForNext _CIexp __vbaMidStmtBstr __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

8bfba2880378f63934268b3f83bb9c3d_JaffaCakes118

msvbvm60

generic