bfc7596ecd06a9d619dbd482631b0d84_JaffaCakes118

General

Target
bfc7596ecd06a9d619dbd482631b0d84_JaffaCakes118
Size 112KB
Sample240825-a2nxrazglm
SHA256 ea3c89f63b3655bc11eade2ca63df876233538224152115a02901634b457ba2c
MD5 bfc7596ecd06a9d619dbd482631b0d84
SHA1 4030ca8acfd762700fa26b31ba1c9f53d5ce4826
SHA512 24fa3c5fddec6cc6629271c53eada3271c809d38cf00947584342cb60e14a80a4004036878a51309ef3139c061962b72c7bdf8d859bca5d4623eebc7080c3ea9
SSDEEP 1536:zK029oXJ5cxCIFYHO5oK+szCua7laQRAOFD:9WoJ5wFYHzsWuWRAc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfc7596ecd06a9d619dbd482631b0d84_JaffaCakes118

File Explorer

bfc7596ecd06a9d619dbd482631b0d84_JaffaCakes118

.exe 112KB

bfc7596ecd06a9d619dbd482631b0d84_JaffaCakes118

IMPHASH 8b4ff463c9c5259be6066e00cd0b3d52
SHA256 ea3c89f63b3655bc11eade2ca63df876233538224152115a02901634b457ba2c
MD5 bfc7596ecd06a9d619dbd482631b0d84
SHA1 4030ca8acfd762700fa26b31ba1c9f53d5ce4826
SHA512 24fa3c5fddec6cc6629271c53eada3271c809d38cf00947584342cb60e14a80a4004036878a51309ef3139c061962b72c7bdf8d859bca5d4623eebc7080c3ea9
SSDEEP 1536:zK029oXJ5cxCIFYHO5oK+szCua7laQRAOFD:9WoJ5wFYHzsWuWRAc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5616

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr ord589 __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj __vbaLenBstrB ord662 _adj_fdiv_m32 ord666 __vbaAryDestruct __vbaLateMemSt __vbaExitProc ord593 __vbaOnError ord595 ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord521 __vbaFpR8 _CIsin ord632 __vbaChkstk EVENT_SINK_AddRef ord528 __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaObjVar DllFunctionCall _adj_fpatan ord676 EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaFPException ord532 __vbaStrVarVal ord645 _CIlog __vbaNew2 __vbaInStr ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 __vbaVarSetObj __vbaFreeStrList ord682 _adj_fdivr_m32 ord684 _adj_fdiv_r ord100 __vbaVarTstNe ord610 __vbaVarAdd __vbaVarDup __vbaStrToAnsi __vbaFpI4 ord617 __vbaLateMemCallLd _CIatan __vbaStrMove ord650 _allmul ord545 _CItan _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

bfc7596ecd06a9d619dbd482631b0d84_JaffaCakes118

msvbvm60

generic