8d46eb9d19ac697b2573c5d804c3f484_JaffaCakes118

General

Target
8d46eb9d19ac697b2573c5d804c3f484_JaffaCakes118
Size 32KB
Sample240812-etzrhavdqp
SHA256 d962ced65eac65126e1e77a30fa893f01eed34d2b7e8baaec4d52960ceeb424a
MD5 8d46eb9d19ac697b2573c5d804c3f484
SHA1 01f17507102f2f13b7d344c01630431df68aec6b
SHA512 c3b990c185eb7a5865ac38c861d79437dfc1ac95b4778a26bf5772c42b6f736af59d5edf21bb54c1ae5fa2d6da6d0cc213cda7d88ee42dc7176b97cca432e057
SSDEEP 384:lEhL6GOCjyslWeOWw9iVR9TB51q5AGBKMZM2DZSSEg:lExAC1jO6T9TB5QXBKM/Yt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d46eb9d19ac697b2573c5d804c3f484_JaffaCakes118

File Explorer

8d46eb9d19ac697b2573c5d804c3f484_JaffaCakes118

.exe 32KB

8d46eb9d19ac697b2573c5d804c3f484_JaffaCakes118

IMPHASH ad2750985556ec7ed66c80dbac1fa8b6
SHA256 d962ced65eac65126e1e77a30fa893f01eed34d2b7e8baaec4d52960ceeb424a
MD5 8d46eb9d19ac697b2573c5d804c3f484
SHA1 01f17507102f2f13b7d344c01630431df68aec6b
SHA512 c3b990c185eb7a5865ac38c861d79437dfc1ac95b4778a26bf5772c42b6f736af59d5edf21bb54c1ae5fa2d6da6d0cc213cda7d88ee42dc7176b97cca432e057
SSDEEP 384:lEhL6GOCjyslWeOWw9iVR9TB51q5AGBKMZM2DZSSEg:lExAC1jO6T9TB5QXBKM/Yt
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

ord690 __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaAryMove __vbaFreeVar __vbaLateIdCall __vbaStrVarMove __vbaLenBstr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 _adj_fprem1 __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit __vbaOnError __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i _CIsin ord709 ord525 ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaCyI2 ord529 __vbaStrCmp __vbaPutOwner3 __vbaVarTstEq DllFunctionCall _adj_fpatan __vbaFixstrConstruct EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode ord712 _adj_fprem _adj_fdivr_m64 ord530 ord609 __vbaFPException ord717 __vbaUbound ord644 _CIlog __vbaFileOpen __vbaVar2Vec __vbaInStr __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 ord689 __vbaVarDup __vbaStrToAnsi ord616 ord617 _CIatan __vbaAryCopy __vbaStrMove _allmul _CItan __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

8d46eb9d19ac697b2573c5d804c3f484_JaffaCakes118

msvbvm60

generic