bca5b3a4b173acc7cbe1d817c61f9c38_JaffaCakes118

General

Target
bca5b3a4b173acc7cbe1d817c61f9c38_JaffaCakes118
Size 575KB
Sample240823-wrbeka1app
SHA256 e7faaf1cf824f0b159193622366b8042503595747bd53366da833718f5f08f1b
MD5 bca5b3a4b173acc7cbe1d817c61f9c38
SHA1 13909de3b78f2055116af6fc1b984851632b671c
SHA512 9c64cfe06a95c8fbd22814d7026a96158ace9c7f4fbe30dc71199b4965e7007bd163335a76b42909c912b2724f85fada43f4e51c28e8d86460b210ea35dd2b63
SSDEEP 6144:f/7CRPy3ksbF7dQpEce7G5iFGatzS37wKD5n098AJf112mP7Zg8frjQlOZv5dPBE:bCRPqksJXoaTKDN0jLrZgyrjx55Javk4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bca5b3a4b173acc7cbe1d817c61f9c38_JaffaCakes118

File Explorer

bca5b3a4b173acc7cbe1d817c61f9c38_JaffaCakes118

.exe .vbs 575KB

bca5b3a4b173acc7cbe1d817c61f9c38_JaffaCakes118

IMPHASH d2dcc0688f9fce06b7a684bdc2248227
SHA256 e7faaf1cf824f0b159193622366b8042503595747bd53366da833718f5f08f1b
MD5 bca5b3a4b173acc7cbe1d817c61f9c38
SHA1 13909de3b78f2055116af6fc1b984851632b671c
SHA512 9c64cfe06a95c8fbd22814d7026a96158ace9c7f4fbe30dc71199b4965e7007bd163335a76b42909c912b2724f85fada43f4e51c28e8d86460b210ea35dd2b63
SSDEEP 6144:f/7CRPy3ksbF7dQpEce7G5iFGatzS37wKD5n098AJf112mP7Zg8frjQlOZv5dPBE:bCRPqksJXoaTKDN0jLrZgyrjx55Javk4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86 polyglot

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7476

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLateIdCall ord588 __vbaLineInputStr __vbaLenBstr __vbaStrVarMove __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaCopyBytes __vbaVarCmpNe __vbaStrCat ord660 __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct ord593 __vbaExitProc ord300 __vbaFileCloseAll ord594 __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaFpR4 ord599 ord306 __vbaStrFixstr __vbaFpR8 __vbaBoolVarNull _CIsin ord631 __vbaErase ord632 __vbaVarZero __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaPrintObj __vbaI2I4 DllFunctionCall ord670 _adj_fpatan __vbaFixstrConstruct __vbaLateIdCallLd __vbaStrR8 __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaUI1I2 _CIsqrt __vbaLateIdCallSt __vbaVarAnd EVENT_SINK_QueryInterface __vbaStrUI1 __vbaVarMul __vbaExceptHandler ord711 __vbaPrintFile __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaR8ErrVar ord608 __vbaFPException __vbaInStrVar ord717 __vbaUbound __vbaStrVarVal __vbaGetOwner4 __vbaVarCat ord535 __vbaDateVar __vbaI2Var __vbaFileSeek ord537 ord644 ord645 ord538 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr ord648 __vbaR8Str __vbaNew2 ord570 __vbaVar2Vec ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarAdd __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaVarCopy ord616 __vbaFpI4 ord617 _CIatan __vbaCastObj __vbaStrMove __vbaAryCopy ord619 __vbaR8IntI4 _allmul __vbaLateIdSt _CItan __vbaFPInt __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

bca5b3a4b173acc7cbe1d817c61f9c38_JaffaCakes118

msvbvm60

generic