aabac9c2092fac518f9208a52e30408c_JaffaCakes118

General

Target
aabac9c2092fac518f9208a52e30408c_JaffaCakes118
Size 1.1MB
Sample240819-m14b9stcpl
SHA256 e4de1fc0ad64e962e9745874be7c5b897788c93ce4f57ff6436784f9fb81a58b
MD5 aabac9c2092fac518f9208a52e30408c
SHA1 6385151868274bf69912980374386c1913e1505a
SHA512 913f6f9cef36c51b30fcc32d216e56154143a6c07b19db9764c275e081a000fc0ec90f4ec5a29f6826131e169cbef7fdb31153e34e1468373fff3c3b747aa55e
SSDEEP 24576:L2gEU1vNHM2pIvCYJGeKejfAR8IZF3mwyT5avC:/M2p76GPezeOoC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aabac9c2092fac518f9208a52e30408c_JaffaCakes118

File Explorer

aabac9c2092fac518f9208a52e30408c_JaffaCakes118

.exe 1.1MB

aabac9c2092fac518f9208a52e30408c_JaffaCakes118

IMPHASH faf8b5e354fd2c49a3aa887fa6511752
SHA256 e4de1fc0ad64e962e9745874be7c5b897788c93ce4f57ff6436784f9fb81a58b
MD5 aabac9c2092fac518f9208a52e30408c
SHA1 6385151868274bf69912980374386c1913e1505a
SHA512 913f6f9cef36c51b30fcc32d216e56154143a6c07b19db9764c275e081a000fc0ec90f4ec5a29f6826131e169cbef7fdb31153e34e1468373fff3c3b747aa55e
SSDEEP 24576:L2gEU1vNHM2pIvCYJGeKejfAR8IZF3mwyT5avC:/M2p76GPezeOoC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6092

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaResume __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaExitProc __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaStrFixstr _CIsin ord631 ord632 __vbaChkstk __vbaFileClose __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaPutOwner3 __vbaObjVar __vbaI2I4 DllFunctionCall _adj_fpatan __vbaFixstrConstruct __vbaRecUniToAnsi ord600 _CIsqrt __vbaExceptHandler ord711 __vbaStrToUnicode __vbaPrintFile _adj_fprem _adj_fdivr_m64 ord607 ord608 ord716 __vbaFPException __vbaUbound __vbaStrVarVal __vbaVarCat ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaStrToAnsi __vbaVarDup ord616 __vbaVarCopy __vbaFpI4 ord617 __vbaLateMemCallLd _CIatan __vbaStrMove __vbaAryCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

aabac9c2092fac518f9208a52e30408c_JaffaCakes118

msvbvm60

generic