d467d354d9de3253b8c9103fc2187cbc_JaffaCakes118

General

Target
d467d354d9de3253b8c9103fc2187cbc_JaffaCakes118
Size 325KB
Sample240908-p452dazand
SHA256 a661b06feb97bbd02bf26a03a2f24fbd9a004b01c3340f724775fd75cd438271
MD5 d467d354d9de3253b8c9103fc2187cbc
SHA1 a45c3fa18028157cddcdd88288ec9a7eaa721c49
SHA512 b4e9e9ac41c56e5479a47047400d10251649b1cdb75fd277fbda925899fc0ba517a3bea90fab1cc88a13427c8070006fde8d9f3f16f955473e4c90edf046cadf
SSDEEP 6144:D6w5JLZIPgBjB/xhcx9OpINuKiLvoTa/XQaPdunK9p7dCuxlquy:fhRBA7oINuKXIQaPoK9poqy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d467d354d9de3253b8c9103fc2187cbc_JaffaCakes118

File Explorer

d467d354d9de3253b8c9103fc2187cbc_JaffaCakes118

.exe 325KB

d467d354d9de3253b8c9103fc2187cbc_JaffaCakes118

IMPHASH 04b8c1e4af8c30cbbbd31220cb0c3a9b
SHA256 a661b06feb97bbd02bf26a03a2f24fbd9a004b01c3340f724775fd75cd438271
MD5 d467d354d9de3253b8c9103fc2187cbc
SHA1 a45c3fa18028157cddcdd88288ec9a7eaa721c49
SHA512 b4e9e9ac41c56e5479a47047400d10251649b1cdb75fd277fbda925899fc0ba517a3bea90fab1cc88a13427c8070006fde8d9f3f16f955473e4c90edf046cadf
SSDEEP 6144:D6w5JLZIPgBjB/xhcx9OpINuKiLvoTa/XQaPdunK9p7dCuxlquy:fhRBA7oINuKXIQaPoK9poqy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5380

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60.dll

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaLsetFixstr __vbaSetSystemError _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit __vbaOnError _adj_fdiv_m16i ord303 _adj_fdivr_m16i ord309 _CIsin __vbaErase ord631 __vbaVarZero __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaAryConstruct2 __vbaVarTstEq DllFunctionCall ord670 _adj_fpatan __vbaFixstrConstruct __vbaRedim EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaStr2Vec __vbaExceptHandler ord711 __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var ord644 _CIlog __vbaFileOpen __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord578 ord100 __vbaI4Var __vbaAryLock __vbaVarAdd __vbaVarDup __vbaStrToAnsi __vbaVarMod _CIatan __vbaStrMove __vbaAryCopy _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

d467d354d9de3253b8c9103fc2187cbc_JaffaCakes118

msvbvm60.dll

generic