c03e57129c0e795b176ea2c751883660_JaffaCakes118

General

Target
c03e57129c0e795b176ea2c751883660_JaffaCakes118
Size 72KB
Sample240825-jay33sthjr
SHA256 4a954e394bf3865aad98ec626e549bf58a2b18b1e7f1be72e131c76b4777edf5
MD5 c03e57129c0e795b176ea2c751883660
SHA1 1cc1082404ae43ba971985e53dfc0cf2dc913eb1
SHA512 4656ef92cc8c9bcc4f1c7683b4461c18528df2fcc4db575744ab8c16a78f723b23313c55169fa92baf2782e799034457d49a060b302f85c193a2e0c6c2f94cec
SSDEEP 1536:b4WzGsZJR11a7QNd92vewURdbfTYGKLW/8aho:PXR147QNz5wURdbfTvQW09
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c03e57129c0e795b176ea2c751883660_JaffaCakes118

File Explorer

c03e57129c0e795b176ea2c751883660_JaffaCakes118

.exe 72KB

c03e57129c0e795b176ea2c751883660_JaffaCakes118

IMPHASH 4c9bcd5ef032f52a1cbf624f82734dae
SHA256 4a954e394bf3865aad98ec626e549bf58a2b18b1e7f1be72e131c76b4777edf5
MD5 c03e57129c0e795b176ea2c751883660
SHA1 1cc1082404ae43ba971985e53dfc0cf2dc913eb1
SHA512 4656ef92cc8c9bcc4f1c7683b4461c18528df2fcc4db575744ab8c16a78f723b23313c55169fa92baf2782e799034457d49a060b302f85c193a2e0c6c2f94cec
SSDEEP 1536:b4WzGsZJR11a7QNd92vewURdbfTYGKLW/8aho:PXR147QNz5wURdbfTvQW09
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 ord516 _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit __vbaOnError __vbaStrLike _adj_fdiv_m16i _adj_fdivr_m16i __vbaStrFixstr _CIsin __vbaErase __vbaVarZero ord525 ord632 __vbaChkstk ord526 __vbaFileClose ord528 __vbaGenerateBoundsError __vbaGet3 __vbaStrCmp __vbaAryConstruct2 DllFunctionCall _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaRecUniToAnsi __vbaUI1I2 _CIsqrt __vbaStr2Vec __vbaExceptHandler ord711 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException __vbaInStrVar ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr ord570 __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaVarAdd __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaVarMod __vbaVarCopy ord616 _CIatan __vbaStrMove __vbaAryCopy _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

c03e57129c0e795b176ea2c751883660_JaffaCakes118

msvbvm60

generic