c2987576a2f8e5eccb5cf69e37c4b26c_JaffaCakes118

General

Target
c2987576a2f8e5eccb5cf69e37c4b26c_JaffaCakes118
Size 762KB
Sample240826-jzqg8stdpe
SHA256 d379a54ab4ec47aca4323fd80aeb45be4f2d9d3560ed9d20f6d8c3428d5e9470
MD5 c2987576a2f8e5eccb5cf69e37c4b26c
SHA1 39b340fa806db889d19226ee284ebcd6a7826c94
SHA512 842785c4697223ac0dceb12c8549d9f3e40537a7b80125af658a0c08998518eabdfbc667227287e30a821bfc2c6aaa1f2126761cbb4c8818121c7d47c44e232e
SSDEEP 12288:Eh571rbFo/qmKpa0dtIwh7xepDStF2e+BYR1WNmRovVeSKiouq6OIZUDwhmie:EHrgV09Bs5IYBc1WNmSYdiRq6LUDw0R
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2987576a2f8e5eccb5cf69e37c4b26c_JaffaCakes118

File Explorer

c2987576a2f8e5eccb5cf69e37c4b26c_JaffaCakes118

.exe 762KB

c2987576a2f8e5eccb5cf69e37c4b26c_JaffaCakes118

IMPHASH 8bbe56be552e64d1269338e4dd3da9ff
SHA256 d379a54ab4ec47aca4323fd80aeb45be4f2d9d3560ed9d20f6d8c3428d5e9470
MD5 c2987576a2f8e5eccb5cf69e37c4b26c
SHA1 39b340fa806db889d19226ee284ebcd6a7826c94
SHA512 842785c4697223ac0dceb12c8549d9f3e40537a7b80125af658a0c08998518eabdfbc667227287e30a821bfc2c6aaa1f2126761cbb4c8818121c7d47c44e232e
SSDEEP 12288:Eh571rbFo/qmKpa0dtIwh7xepDStF2e+BYR1WNmRovVeSKiouq6OIZUDwhmie:EHrgV09Bs5IYBc1WNmSYdiRq6LUDw0R
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

24814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaGosubReturn __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct _adj_fdiv_m16i _adj_fdivr_m16i _CIsin ord631 __vbaErase ord632 __vbaVarZero __vbaChkstk __vbaGosubFree __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaRedim __vbaRecUniToAnsi __vbaUI1I2 _CIsqrt __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI4 ord616 _CIatan __vbaStrMove ord618 __vbaUI1Str __vbaStrVarCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

c2987576a2f8e5eccb5cf69e37c4b26c_JaffaCakes118

msvbvm60

generic