eb145069a97a4e34a6b458785c0b3838_JaffaCakes118

General

Target
eb145069a97a4e34a6b458785c0b3838_JaffaCakes118
Size 134KB
Sample240919-lt9d9sscle
SHA256 4367263476fe95e3e9e3063a01e7c498ddfc9727aa312dbc319bba4c81814a70
MD5 eb145069a97a4e34a6b458785c0b3838
SHA1 7be548aa56d96714d83c3456254fa7c62b115d85
SHA512 f0980a6e665c86f6ac2a7149a96f9df758ff13d0ca0ab6402e14f3fa8f51a4c1f2fff31404a7573ddc4f94759ca292de873042ce91d0f8708e66f9ced67dabce
SSDEEP 3072:E1fI2EunoSQDJHd6mNhmk3yUlghq1i4hRcz/0GGc3wtPQ:E1fwuns9dfNhmkAr48T0GG+GPQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb145069a97a4e34a6b458785c0b3838_JaffaCakes118

File Explorer

eb145069a97a4e34a6b458785c0b3838_JaffaCakes118

.exe 134KB

eb145069a97a4e34a6b458785c0b3838_JaffaCakes118

IMPHASH e4bab3c2492e5efa54101bbf574158c1
SHA256 4367263476fe95e3e9e3063a01e7c498ddfc9727aa312dbc319bba4c81814a70
MD5 eb145069a97a4e34a6b458785c0b3838
SHA1 7be548aa56d96714d83c3456254fa7c62b115d85
SHA512 f0980a6e665c86f6ac2a7149a96f9df758ff13d0ca0ab6402e14f3fa8f51a4c1f2fff31404a7573ddc4f94759ca292de873042ce91d0f8708e66f9ced67dabce
SSDEEP 3072:E1fI2EunoSQDJHd6mNhmk3yUlghq1i4hRcz/0GGc3wtPQ:E1fwuns9dfNhmkAr48T0GG+GPQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5268

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA

msvbvm60.dll

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent _adj_fprem1 __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i _CIsin ord709 __vbaErase __vbaVarZero __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaGet3 __vbaPutOwner3 __vbaAryConstruct2 DllFunctionCall _adj_fpatan __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler ord711 ord712 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord607 __vbaFPException ord717 __vbaGetOwner3 __vbaUbound ord644 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 ord570 __vbaR8Str __vbaNew2 __vbaVar2Vec __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord685 ord578 ord100 __vbaI4Var __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI4 ord616 ord617 _CIatan __vbaStrMove __vbaAryCopy __vbaR8IntI4 __vbaStrVarCopy _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeObj __vbaI4ErrVar __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

eb145069a97a4e34a6b458785c0b3838_JaffaCakes118

kernel32

msvbvm60.dll

generic