c0aa91c6046538176e9bfda0c94b99df_JaffaCakes118

General

Target
c0aa91c6046538176e9bfda0c94b99df_JaffaCakes118
Size 52KB
Sample240825-nsw4nasdpf
SHA256 cdafff26be88bdd04bd1eb0af7374a932782040a2fb626d49966ea4d971b8bf5
MD5 c0aa91c6046538176e9bfda0c94b99df
SHA1 29f6376dae84d96822499542d7268ceae359ffeb
SHA512 eec2f9b501f53cc2779c31a8faab2b6cb2aaae5dff87a88407c2aa5e901fa9a6db8f0ee85c78db09678f9f94db00a08f2a9c30dc213a5b0c33117e4d181433f4
SSDEEP 768:4mM2rkj/Wb9bPo/YICQspcU5W6oyUW5yc855+wuqGJcN9jcAg:Bkj/WBToK7DUue4jl6xcA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0aa91c6046538176e9bfda0c94b99df_JaffaCakes118

File Explorer

c0aa91c6046538176e9bfda0c94b99df_JaffaCakes118

.exe 52KB

c0aa91c6046538176e9bfda0c94b99df_JaffaCakes118

IMPHASH 6f40f1a87d5529e42e310502843e542e
SHA256 cdafff26be88bdd04bd1eb0af7374a932782040a2fb626d49966ea4d971b8bf5
MD5 c0aa91c6046538176e9bfda0c94b99df
SHA1 29f6376dae84d96822499542d7268ceae359ffeb
SHA512 eec2f9b501f53cc2779c31a8faab2b6cb2aaae5dff87a88407c2aa5e901fa9a6db8f0ee85c78db09678f9f94db00a08f2a9c30dc213a5b0c33117e4d181433f4
SSDEEP 768:4mM2rkj/Wb9bPo/YICQspcU5W6oyUW5yc855+wuqGJcN9jcAg:Bkj/WBToK7DUue4jl6xcA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6164

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaNextEachVar ord516 __vbaStrErrVarCopy _adj_fprem1 ord518 ord626 __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaExitProc __vbaOnError __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i ord520 __vbaStrFixstr _CIsin ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef ord529 __vbaObjVar DllFunctionCall _adj_fpatan __vbaFixstrConstruct EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaPrintFile __vbaStrToUnicode ord713 _adj_fprem _adj_fdivr_m64 ord608 ord716 __vbaFPException __vbaInStrVar __vbaVarCat __vbaLsetFixstrFree _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarSetVar __vbaLateMemCall __vbaStrToAnsi __vbaVarLateMemCallLd __vbaFpI4 ord616 ord617 __vbaVarSetObjAddref _CIatan __vbaStrMove __vbaForEachVar _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

c0aa91c6046538176e9bfda0c94b99df_JaffaCakes118

msvbvm60

generic