c03eca89f2b53266e5824ee19d8112ee_JaffaCakes118

General

Target
c03eca89f2b53266e5824ee19d8112ee_JaffaCakes118
Size 104KB
Sample240825-jbwpcaserb
SHA256 690564196fdb63218b09c9d6185333083db63a842c476a04476175a3568ae44f
MD5 c03eca89f2b53266e5824ee19d8112ee
SHA1 1a8f2e4448feee1353cfcc3d715fe42a83c193a5
SHA512 4df3690f25a9932c663c4f7db09ba09c86d29e6f45d417f6ad4b294f29bb9bd25cd3c02cc3e3f899ca3177d8aea5169a7a8131b80ea43561675a6b10ef6d35b4
SSDEEP 3072:z1DmHsnS1bctxfLaqDSL0zWL3Wn/a40Nxfu:Watxfm4SL0zqWnr0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c03eca89f2b53266e5824ee19d8112ee_JaffaCakes118

File Explorer

c03eca89f2b53266e5824ee19d8112ee_JaffaCakes118

.exe 104KB

c03eca89f2b53266e5824ee19d8112ee_JaffaCakes118

IMPHASH c2c93ae3661d03e9ff98a878f5604107
SHA256 690564196fdb63218b09c9d6185333083db63a842c476a04476175a3568ae44f
MD5 c03eca89f2b53266e5824ee19d8112ee
SHA1 1a8f2e4448feee1353cfcc3d715fe42a83c193a5
SHA512 4df3690f25a9932c663c4f7db09ba09c86d29e6f45d417f6ad4b294f29bb9bd25cd3c02cc3e3f899ca3177d8aea5169a7a8131b80ea43561675a6b10ef6d35b4
SSDEEP 3072:z1DmHsnS1bctxfLaqDSL0zWL3Wn/a40Nxfu:Watxfm4SL0zqWnr0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11036

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaEnd __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaStrCat __vbaError __vbaRecDestruct __vbaSetSystemError __vbaNameFile __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar ord666 __vbaAryDestruct ord593 ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord598 __vbaFpR4 __vbaStrFixstr __vbaBoolVarNull __vbaFpR8 _CIsin __vbaErase __vbaVarCmpGt ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaCyI2 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaPutOwner3 __vbaObjVar ord561 __vbaI2I4 DllFunctionCall __vbaRedimPreserve __vbaStrR4 __vbaLbound _adj_fpatan __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord600 ord601 __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface ord710 __vbaUI1I4 __vbaExceptHandler ord711 __vbaStrToUnicode ord712 _adj_fprem _adj_fdivr_m64 ord607 ord608 ord716 __vbaFPException ord717 __vbaInStrVar __vbaGetOwner3 __vbaStrVarVal __vbaUbound __vbaVarCat ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec __vbaNew2 ord570 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaAryLock __vbaLateMemCall __vbaVarDup __vbaStrToAnsi __vbaFpI4 __vbaRecDestructAnsi __vbaLateMemCallLd ord617 _CIatan __vbaAryCopy __vbaStrMove ord619 _allmul _CItan __vbaAryUnlock __vbaUI1Var __vbaFPInt _CIexp __vbaStrCy __vbaFreeStr __vbaI4ErrVar __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

c03eca89f2b53266e5824ee19d8112ee_JaffaCakes118

msvbvm60

generic