ba5ad10935713fc0e10e8d598bc8a98e_JaffaCakes118

General

Target
ba5ad10935713fc0e10e8d598bc8a98e_JaffaCakes118
Size 306KB
Sample240823-e2ljvaxfjl
SHA256 13c3b4a733fe2f7fb31d978204455ea07d15e7b5121fb096cd5a06b8ee870a37
MD5 ba5ad10935713fc0e10e8d598bc8a98e
SHA1 d0020cb99793b22a7e675bd2ec800df443168228
SHA512 67b1946e8dd42029f93323539f7a38a94fa4258d85f8a2c75e0256ea523f4a89e8ad7abf4aaae290ca29ebcf0fa70ebe6d070da2aab9e629d4234e28164f3ec1
SSDEEP 6144:sW5nVTPBAxL0oiUKinILgvc2pU74hCyxGZqNJGqJoPF/XbgXRvmS:sW5o+oTKv2pQ4Fx/NJXQ/bivmS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba5ad10935713fc0e10e8d598bc8a98e_JaffaCakes118

File Explorer

ba5ad10935713fc0e10e8d598bc8a98e_JaffaCakes118

.exe 306KB

ba5ad10935713fc0e10e8d598bc8a98e_JaffaCakes118

IMPHASH 3aca7b6766d5ee37a1aadcd3bd09c54f
SHA256 13c3b4a733fe2f7fb31d978204455ea07d15e7b5121fb096cd5a06b8ee870a37
MD5 ba5ad10935713fc0e10e8d598bc8a98e
SHA1 d0020cb99793b22a7e675bd2ec800df443168228
SHA512 67b1946e8dd42029f93323539f7a38a94fa4258d85f8a2c75e0256ea523f4a89e8ad7abf4aaae290ca29ebcf0fa70ebe6d070da2aab9e629d4234e28164f3ec1
SSDEEP 6144:sW5nVTPBAxL0oiUKinILgvc2pU74hCyxGZqNJGqJoPF/XbgXRvmS:sW5o+oTKv2pQ4Fx/NJXQ/bivmS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5092

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i _CIsin __vbaErase ord632 __vbaVarZero __vbaChkstk ord526 __vbaFileClose __vbaGenerateBoundsError __vbaGet3 __vbaAryConstruct2 DllFunctionCall _adj_fpatan __vbaRedim __vbaRecUniToAnsi __vbaUI1I2 _CIsqrt __vbaExceptHandler ord711 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord570 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaVarMod _CIatan __vbaStrMove __vbaAryCopy _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

ba5ad10935713fc0e10e8d598bc8a98e_JaffaCakes118

msvbvm60

generic