f0914c5cfacbff5faa0a474ffb0a6c49_JaffaCakes118

General

Target
f0914c5cfacbff5faa0a474ffb0a6c49_JaffaCakes118
Size 252KB
Sample240921-zee4rssdjh
SHA256 fe2606e24c7e7b6289acc356907ebd884c15c93d05b6c7ea7127aa3c85200bad
MD5 f0914c5cfacbff5faa0a474ffb0a6c49
SHA1 89bcf8620e3b3724c2d806793d7824a5c63194ee
SHA512 d484e27d5d406074b20596ba503c3ce03c51dfedb719077301283c84c600f1a40a2f5f0257f26ed1b07cc3e440cb36ca43cf09ad3171be3e37091f8e7d2f37af
SSDEEP 6144:Rg/f/HI2MCdkK64+67N/yEhk+x5Ntl8UyqhBPGhhQV7aoyp5Db907vH:q3/HI2MCdkK64l7RjhkA5ICG2nyp1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0914c5cfacbff5faa0a474ffb0a6c49_JaffaCakes118

File Explorer

f0914c5cfacbff5faa0a474ffb0a6c49_JaffaCakes118

.exe 252KB

f0914c5cfacbff5faa0a474ffb0a6c49_JaffaCakes118

IMPHASH d0cb13865baca4c127aeba0faa087bb4
SHA256 fe2606e24c7e7b6289acc356907ebd884c15c93d05b6c7ea7127aa3c85200bad
MD5 f0914c5cfacbff5faa0a474ffb0a6c49
SHA1 89bcf8620e3b3724c2d806793d7824a5c63194ee
SHA512 d484e27d5d406074b20596ba503c3ce03c51dfedb719077301283c84c600f1a40a2f5f0257f26ed1b07cc3e440cb36ca43cf09ad3171be3e37091f8e7d2f37af
SSDEEP 6144:Rg/f/HI2MCdkK64+67N/yEhk+x5Ntl8UyqhBPGhhQV7aoyp5Db907vH:q3/HI2MCdkK64l7RjhkA5ICG2nyp1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarTstGt __vbaVarSub ord690 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree ord694 __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 EVENT_SINK_Invoke __vbaRaiseEvent __vbaFreeObjList ord516 __vbaStrErrVarCopy _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaStrCat __vbaError __vbaBoolErrVar __vbaLsetFixstr __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj __vbaVargVarCopy _adj_fdiv_m32 Zombie_GetTypeInfo __vbaAryDestruct __vbaCyErrVar ord592 __vbaExitProc ord595 __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaVarIndexLoad __vbaBoolVar __vbaForEachCollVar ord520 __vbaVarTstLt __vbaBoolVarNull _CIsin ord631 __vbaErase __vbaVargVarMove __vbaVarCmpGt ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaStrCmp __vbaAryConstruct2 __vbaPutOwner3 __vbaVarTstEq __vbaDateR8 ord561 __vbaNextEachCollVar __vbaI2I4 __vbaObjVar DllFunctionCall ord563 __vbaVarOr ord670 __vbaFpUI1 __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct Zombie_GetTypeInfoCount __vbaRedim __vbaUI1ErrVar __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 _CIsqrt __vbaObjIs EVENT_SINK_QueryInterface __vbaStrUI1 __vbaStr2Vec __vbaExceptHandler ord711 __vbaStrToUnicode __vbaPrintFile ord606 __vbaR4ErrVar _adj_fprem _adj_fdivr_m64 __vbaR8ErrVar __vbaI2Str ord608 ord716 __vbaFPException ord717 __vbaInStrVar ord319 __vbaGetOwner3 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaDateVar ord535 __vbaI2Var ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec ord648 ord570 __vbaInStr __vbaR8Str __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaVarCmpLt __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq ord689 __vbaAryLock __vbaLateMemCall __vbaVarAdd ord320 __vbaVarDup __vbaStrToAnsi ord321 ord616 __vbaVarCopy ord617 _CIatan __vbaI2ErrVar __vbaAryCopy __vbaStrMove __vbaCastObj _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj ord580 ord581

Sharing

General

Malware Config

Signatures

File Explorer

f0914c5cfacbff5faa0a474ffb0a6c49_JaffaCakes118

msvbvm60

generic