c0acdf245db3db9716a9740252953050_JaffaCakes118

General

Target
c0acdf245db3db9716a9740252953050_JaffaCakes118
Size 256KB
Sample240825-nw7pkaserf
SHA256 70978036d4af7e699682d98b66a53ebb834e02737a345d6d3f54830ff5311c6c
MD5 c0acdf245db3db9716a9740252953050
SHA1 51577fc1dc1a04fa0c5f8deb7a885bb952d4cc21
SHA512 e5121affe49ae6991bc5160e7108f033d13f49ee8b7072392185249f6252afb43285dbfa517f8e5fad70f46c6f2172bbe735010f81f8835e70a4db5cc50fbdb9
SSDEEP 6144:M7RPGkG+2O01WQY4MyTjGMT8N00lFKgOLpE4dFbbxGo:M7RekGLO0CyvGMT8N00GlDM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0acdf245db3db9716a9740252953050_JaffaCakes118

File Explorer

c0acdf245db3db9716a9740252953050_JaffaCakes118

.exe 256KB

c0acdf245db3db9716a9740252953050_JaffaCakes118

IMPHASH 7cd1bb9dd1cb468451c243dc15dafd43
SHA256 70978036d4af7e699682d98b66a53ebb834e02737a345d6d3f54830ff5311c6c
MD5 c0acdf245db3db9716a9740252953050
SHA1 51577fc1dc1a04fa0c5f8deb7a885bb952d4cc21
SHA512 e5121affe49ae6991bc5160e7108f033d13f49ee8b7072392185249f6252afb43285dbfa517f8e5fad70f46c6f2172bbe735010f81f8835e70a4db5cc50fbdb9
SSDEEP 6144:M7RPGkG+2O01WQY4MyTjGMT8N00lFKgOLpE4dFbbxGo:M7RekGLO0CyvGMT8N00GlDM
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaR8FixI4 ord582 __vbaStrI2 ord583 ord584 _CIcos _adj_fptan __vbaStrI4 ord585 ord586 ord693 __vbaFreeVar __vbaAryMove ord587 __vbaStrVarMove __vbaLenBstr ord696 __vbaEnd __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 ord518 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaExitProc __vbaVarForInit __vbaOnError __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i ord598 ord520 __vbaFPFix __vbaFpR8 _CIsin ord709 __vbaChkstk __vbaFileClose ord633 EVENT_SINK_AddRef ord528 __vbaPutOwner3 __vbaAryConstruct2 __vbaPrintObj __vbaI2I4 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode ord712 _adj_fprem _adj_fdivr_m64 ord607 ord714 ord530 __vbaFPException ord717 __vbaUbound ord537 ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaAryLock __vbaVarDup __vbaStrToAnsi ord614 __vbaFpI4 ord617 _CIatan __vbaAryCopy __vbaStrMove ord619 _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

c0acdf245db3db9716a9740252953050_JaffaCakes118

msvbvm60

generic