c07401b2321fe0497194313a2309e560_JaffaCakes118

General

Target
c07401b2321fe0497194313a2309e560_JaffaCakes118
Size 68KB
Sample240825-lkyleaygnj
SHA256 29d98c2e097585ddbf33a45f924e50a12447f668fc7e2327c3dba7b70a2926a6
MD5 c07401b2321fe0497194313a2309e560
SHA1 14038e3b2d34742d7f16a08095318a3f0b7232b4
SHA512 2ac644c8edb341a281011458cede3be2af654a7b6834e4d819155df181d1c68fa69a823d83d91652eafd0b600cad8ed183faef1ef67c4ebc5bc7a60144efbed2
SSDEEP 768:6GXQrYm80cFi3ZXeJvSlePOaxeLjPcPIJazW25rwD:6GmMYEJSle2aQLjP1D
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c07401b2321fe0497194313a2309e560_JaffaCakes118

File Explorer

c07401b2321fe0497194313a2309e560_JaffaCakes118

.exe 68KB

c07401b2321fe0497194313a2309e560_JaffaCakes118

IMPHASH a48324eb30e1d85c6074c7e5fbf908bf
SHA256 29d98c2e097585ddbf33a45f924e50a12447f668fc7e2327c3dba7b70a2926a6
MD5 c07401b2321fe0497194313a2309e560
SHA1 14038e3b2d34742d7f16a08095318a3f0b7232b4
SHA512 2ac644c8edb341a281011458cede3be2af654a7b6834e4d819155df181d1c68fa69a823d83d91652eafd0b600cad8ed183faef1ef67c4ebc5bc7a60144efbed2
SSDEEP 768:6GXQrYm80cFi3ZXeJvSlePOaxeLjPcPIJazW25rwD:6GmMYEJSle2aQLjP1D
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5952

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList ord516 _adj_fprem1 ord519 __vbaI2Abs __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaLateMemSt ord592 __vbaExitProc __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord520 ord523 _CIsin ord631 __vbaVargVarMove ord632 __vbaChkstk EVENT_SINK_AddRef __vbaStrCmp ord529 __vbaVarTstEq ord561 __vbaI2I4 __vbaObjVar DllFunctionCall __vbaVarLateMemSt _adj_fpatan __vbaFixstrConstruct EVENT_SINK_Release __vbaNew _CIsqrt __vbaObjIs EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord607 ord716 __vbaFPException __vbaStrVarVal __vbaVarCat ord537 ord645 _CIlog __vbaErrorOverflow __vbaVarLateMemCallLdRf __vbaNew2 __vbaInStr __vbaR8Str _adj_fdiv_m32i ord572 _adj_fdivr_m32i ord573 __vbaVarSetObj __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 ord579 __vbaI4Var __vbaLateMemCall __vbaVarDup __vbaStrToAnsi __vbaFpI4 __vbaVarCopy ord616 __vbaLateMemCallLd ord617 _CIatan __vbaStrMove ord650 _allmul __vbaVarLateMemCallSt _CItan _CIexp __vbaMidStmtBstr __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

c07401b2321fe0497194313a2309e560_JaffaCakes118

msvbvm60

generic