c702e2a337bc08a4a2c3b2ac85e9972d_JaffaCakes118

General

Target
c702e2a337bc08a4a2c3b2ac85e9972d_JaffaCakes118
Size 73KB
Sample240828-rhphls1drc
SHA256 bed85b6c7b530f3561f37792a5fdc52fad0d68d499992b883c433c86c2bfd84d
MD5 c702e2a337bc08a4a2c3b2ac85e9972d
SHA1 456ec1319d539c125002d97c923414a0e487dd6e
SHA512 f370f7619d6f5ceffdb7a8ece29ac1bee650dae3764342861072f42b2d68f6f5475f9a8a01fcb78972a98fd7f7be663d46aec1c6f5b228498393634ad6c18564
SSDEEP 1536:edMUriEc0KJI3iP/5Fv1CW0DIUu9wYoIhxAHgxe8nQfgF4QXHhisQjJfT:PUmEcE3iZNwJ0RToDqergF4QksQ5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Bank details_pdf.exe

File Explorer

c702e2a337bc08a4a2c3b2ac85e9972d_JaffaCakes118

.rar 73KB
Bank details_pdf.exe

.exe 112KB

c702e2a337bc08a4a2c3b2ac85e9972d_JaffaCakes118

SHA256 bed85b6c7b530f3561f37792a5fdc52fad0d68d499992b883c433c86c2bfd84d
MD5 c702e2a337bc08a4a2c3b2ac85e9972d
SHA1 456ec1319d539c125002d97c923414a0e487dd6e
SHA512 f370f7619d6f5ceffdb7a8ece29ac1bee650dae3764342861072f42b2d68f6f5475f9a8a01fcb78972a98fd7f7be663d46aec1c6f5b228498393634ad6c18564
SSDEEP 1536:edMUriEc0KJI3iP/5Fv1CW0DIUu9wYoIhxAHgxe8nQfgF4QXHhisQjJfT:PUmEcE3iZNwJ0RToDqergF4QksQ5
MD5 SHA1 SHA512 SSDEEP

Bank details_pdf.exe

IMPHASH 9f400111ec7b83117c42c2f2f75295cc
SHA256 991289640d200976fd319f76f9acbbf7f3e304b24b5117cb8da23bcf091b2a06
MD5 f00daabd36fbc4313a46d2cad874ac4c
SHA1 ac2063bcf85108b364737680e0b978f43cc8d185
SHA512 aa43b6724ed8b7b2a300e8e3eceb29caca06a484d5faaff1956706d566cd0b34063559e374fb59f3b54754bbaaac1bb740fcc66b8c7880112f00af0514c9e7ae
SSDEEP 1536:SSPfxV40fa9pkgrKHxLdGKc+o0FDHdZ1gI18ORnNy1+dTQYCe:jPXf8KVdhjFD9zK+AcTke
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5292

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaFreeVar ord588 __vbaStrVarMove ord697 __vbaFreeVarList _adj_fdiv_m64 ord513 ord516 ord517 _adj_fprem1 ord628 __vbaStrCat ord553 ord661 __vbaHresultCheckObj __vbaLenBstrB ord662 ord663 ord664 _adj_fdiv_m32 __vbaAryDestruct __vbaLateMemSt __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord703 ord598 ord705 ord520 ord523 __vbaFpR8 _CIsin ord524 ord632 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaObjVar __vbaI2I4 ord670 ord671 __vbaCastObjVar _adj_fpatan ord675 EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface ord710 __vbaExceptHandler ord606 _adj_fprem _adj_fdivr_m64 ord716 __vbaFPException ord717 __vbaStrVarVal _CIlog ord539 __vbaNew2 ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 __vbaI4Str __vbaFreeStrList ord682 _adj_fdivr_m32 _adj_fdiv_r ord100 ord610 __vbaVarAdd __vbaStrComp __vbaVarDup ord612 ord615 __vbaVarLateMemCallLd __vbaLateMemCallLd _CIatan __vbaStrMove __vbaR8IntI4 _allmul _CItan ord546 __vbaFPInt _CIexp __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

c702e2a337bc08a4a2c3b2ac85e9972d_JaffaCakes118

Bank details_pdf.exe

msvbvm60

generic