c8f862e3a3559a5a31c268c918730f53_JaffaCakes118

General

Target
c8f862e3a3559a5a31c268c918730f53_JaffaCakes118
Size 676KB
Sample240829-rdvh3avgra
SHA256 9ef7449c02ffe1c007bb8dd0523f1a8d3fd523e2ccd4c42edf8554e020540088
MD5 c8f862e3a3559a5a31c268c918730f53
SHA1 77390d2c8387c639324c36a45f8415fc3c520056
SHA512 8555e9fb5d62a5afeccbae115a89a168a10bc83b882efbfdbbfe57f9bf6150a4fffa7fe8264363549155de74a72835444015fe161d3b751b2ef36c11c9a5c62d
SSDEEP 12288:usRH2VqZUJlQZOcE3A9f8E/4Y9HgR14ZUB7/Pn1BSNAx:NRH2sUJlnc86UE/1HUZ/1B1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8f862e3a3559a5a31c268c918730f53_JaffaCakes118

File Explorer

c8f862e3a3559a5a31c268c918730f53_JaffaCakes118

.exe 676KB

c8f862e3a3559a5a31c268c918730f53_JaffaCakes118

IMPHASH 1ec8ebbcc1544436b6df36e6a2e5801e
SHA256 9ef7449c02ffe1c007bb8dd0523f1a8d3fd523e2ccd4c42edf8554e020540088
MD5 c8f862e3a3559a5a31c268c918730f53
SHA1 77390d2c8387c639324c36a45f8415fc3c520056
SHA512 8555e9fb5d62a5afeccbae115a89a168a10bc83b882efbfdbbfe57f9bf6150a4fffa7fe8264363549155de74a72835444015fe161d3b751b2ef36c11c9a5c62d
SSDEEP 12288:usRH2VqZUJlQZOcE3A9f8E/4Y9HgR14ZUB7/Pn1BSNAx:NRH2sUJlnc86UE/1HUZ/1B1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

ord582 __vbaVarTstGt ord583 _CIcos _adj_fptan ord585 __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaExitProc ord593 __vbaI4Abs __vbaObjSet __vbaStrLike __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaStrFixstr __vbaBoolVar __vbaBoolVarNull _CIsin ord631 __vbaErase __vbaVarZero ord525 ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef ord528 __vbaGenerateBoundsError __vbaGet3 __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaVarLikeVar __vbaI2I4 DllFunctionCall ord670 __vbaFpUI1 __vbaCastObjVar __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaLateIdCallLd __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaUI1I2 _CIsqrt __vbaObjIs __vbaVarAnd EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException __vbaInStrVar ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var ord644 ord537 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord570 __vbaInStr __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaVarCmpEq __vbaAryLock __vbaStrToAnsi ord614 __vbaFpI4 ord616 _CIatan __vbaCastObj __vbaAryCopy __vbaStrMove __vbaR8IntI4 _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaI4ErrVar __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

c8f862e3a3559a5a31c268c918730f53_JaffaCakes118

msvbvm60

generic