fc4d1e0f02da5a8bd6dc9d5942e45ff6_JaffaCakes118

General

Target
fc4d1e0f02da5a8bd6dc9d5942e45ff6_JaffaCakes118
Size 816KB
Sample240928-pps39sydkd
SHA256 7b231ebd601947c437917695bc1d87f24f5ad9782d19c8acb95961a5843eb500
MD5 fc4d1e0f02da5a8bd6dc9d5942e45ff6
SHA1 cab20ec1c5a8aee8df38d625b760c499353f2552
SHA512 16323d1651392ba44621d877b501e0c4f02641d81c2371512c9444fa59f6fa7119cb9f8b3e717bdcda2c2c13ee3e7558c18b81eadfa61c470aa50e33d9a1837f
SSDEEP 24576:CsB7ajoXXDhSwL01n7HiUYDxGUG/qwX8T3qG6X9hiOT4qMpB:CsBJDHC7CUavwMT3WXak4rH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc4d1e0f02da5a8bd6dc9d5942e45ff6_JaffaCakes118

File Explorer

fc4d1e0f02da5a8bd6dc9d5942e45ff6_JaffaCakes118

.exe 816KB

fc4d1e0f02da5a8bd6dc9d5942e45ff6_JaffaCakes118

IMPHASH 8d1649828c3325a31a5e034f4f9e50da
SHA256 7b231ebd601947c437917695bc1d87f24f5ad9782d19c8acb95961a5843eb500
MD5 fc4d1e0f02da5a8bd6dc9d5942e45ff6
SHA1 cab20ec1c5a8aee8df38d625b760c499353f2552
SHA512 16323d1651392ba44621d877b501e0c4f02641d81c2371512c9444fa59f6fa7119cb9f8b3e717bdcda2c2c13ee3e7558c18b81eadfa61c470aa50e33d9a1837f
SSDEEP 24576:CsB7ajoXXDhSwL01n7HiUYDxGUG/qwX8T3qG6X9hiOT4qMpB:CsBJDHC7CUavwMT3WXak4rH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6420

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub ord583 __vbaR8ForNextCheck _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 ord666 __vbaAryDestruct __vbaVarForInit __vbaExitProc __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad __vbaBoolVarNull _CIsin __vbaErase ord632 __vbaVarZero __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaPutOwner3 __vbaAryConstruct2 __vbaVarLikeVar __vbaI2I4 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaRedim __vbaRecUniToAnsi __vbaUI1ErrVar EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaStr2Vec __vbaExceptHandler ord712 ord713 _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaInStrVar __vbaUbound __vbaStrVarVal __vbaVarCat ord537 ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy ord575 __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaVarAdd __vbaAryLock __vbaVarDup __vbaVarTstGe __vbaVarCopy __vbaFpI4 ord617 _CIatan __vbaStrMove ord619 __vbaR8IntI4 _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

fc4d1e0f02da5a8bd6dc9d5942e45ff6_JaffaCakes118

msvbvm60

generic