9eaca335a1d4b1dec6c43d2260521fa8_JaffaCakes118

General

Target
9eaca335a1d4b1dec6c43d2260521fa8_JaffaCakes118
Size 392KB
Sample240816-rglqbsseqm
SHA256 e8ddcc0a6281b068bb70d83421e9810ebbac24e58cc0185eebd23f5cdb33b325
MD5 9eaca335a1d4b1dec6c43d2260521fa8
SHA1 4df038fd727f22b028b09bd1c2be8e008a4bc057
SHA512 9bda21d0991e2f1c5d037ffc9090ac7f291085be64dc66c410cd7a34a34811bf1cb32fe0e3f0774c40c29f1e806f0c7192fb08a889284f49a3bfc603679141c2
SSDEEP 12288:034ly0rvSYt+tsppZvgjKdZ2+F5xeQPK5pa:034lnSDoOKdx5Ji54
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9eaca335a1d4b1dec6c43d2260521fa8_JaffaCakes118

File Explorer

9eaca335a1d4b1dec6c43d2260521fa8_JaffaCakes118

.exe 392KB

9eaca335a1d4b1dec6c43d2260521fa8_JaffaCakes118

IMPHASH d5472bdeb7dfcfbc89d04ff9eaf4325e
SHA256 e8ddcc0a6281b068bb70d83421e9810ebbac24e58cc0185eebd23f5cdb33b325
MD5 9eaca335a1d4b1dec6c43d2260521fa8
SHA1 4df038fd727f22b028b09bd1c2be8e008a4bc057
SHA512 9bda21d0991e2f1c5d037ffc9090ac7f291085be64dc66c410cd7a34a34811bf1cb32fe0e3f0774c40c29f1e806f0c7192fb08a889284f49a3bfc603679141c2
SSDEEP 12288:034ly0rvSYt+tsppZvgjKdZ2+F5xeQPK5pa:034lnSDoOKdx5Ji54
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6950

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord666 __vbaAryDestruct __vbaVarForInit __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 _CIsin ord631 __vbaErase __vbaVarZero ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaGet3 __vbaAryConstruct2 __vbaObjVar DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord712 _adj_fprem _adj_fdivr_m64 ord608 ord716 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var ord644 ord537 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy ord681 __vbaFreeStrList ord576 _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord100 __vbaVarSetVar __vbaI4Var __vbaVarAdd __vbaAryLock __vbaVarDup __vbaVarMod __vbaVarLateMemCallLd ord616 __vbaFpI4 __vbaLateMemCallLd _CIatan __vbaUI1Str __vbaStrMove ord619 _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaMidStmtBstr __vbaI4ErrVar __vbaFreeStr __vbaFreeObj ord581

kernel32

AllocConsole

user32

AnimateWindow

Sharing

General

Malware Config

Signatures

File Explorer

9eaca335a1d4b1dec6c43d2260521fa8_JaffaCakes118

msvbvm60

kernel32

user32

generic