fdaad4eb64eccc6953ff1ce550eae36f_JaffaCakes118

General

Target
fdaad4eb64eccc6953ff1ce550eae36f_JaffaCakes118
Size 536KB
Sample240929-df8ltaxdkr
SHA256 01ab9c62c600b245f23843974f3c51494e52dedc6147385e968dd9da85a8fee0
MD5 fdaad4eb64eccc6953ff1ce550eae36f
SHA1 35992f8c51d54da131a04824faaac9c76e916943
SHA512 2dd5d39c2b9fc0641df1b9dae1ac80f0429162b649f0661f9056f2a0c7a47b7c336f42ca56111a4165a0f5e1fc573bffb02a6160a380e4280052601fde907c6c
SSDEEP 12288:aox8a9XqSYVr9N4VGLLOwwfghkNANPuMVfJ3bfguQ:0s50M2OkWShBg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdaad4eb64eccc6953ff1ce550eae36f_JaffaCakes118

File Explorer

fdaad4eb64eccc6953ff1ce550eae36f_JaffaCakes118

.exe 536KB

fdaad4eb64eccc6953ff1ce550eae36f_JaffaCakes118

IMPHASH c527ec4fd7e542f708e9a6ac42ef3593
SHA256 01ab9c62c600b245f23843974f3c51494e52dedc6147385e968dd9da85a8fee0
MD5 fdaad4eb64eccc6953ff1ce550eae36f
SHA1 35992f8c51d54da131a04824faaac9c76e916943
SHA512 2dd5d39c2b9fc0641df1b9dae1ac80f0429162b649f0661f9056f2a0c7a47b7c336f42ca56111a4165a0f5e1fc573bffb02a6160a380e4280052601fde907c6c
SSDEEP 12288:aox8a9XqSYVr9N4VGLLOwwfghkNANPuMVfJ3bfguQ:0s50M2OkWShBg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

506427

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegQueryValueExW

kernel32

VirtualProtect CloseHandle WriteFile

msvbvm60

_CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 ord698 _adj_fprem1 __vbaStrCat __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i _CIsin __vbaErase __vbaVarZero __vbaChkstk EVENT_SINK_AddRef ord528 __vbaVarTstEq __vbaAryConstruct2 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaRedim EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler _adj_fprem _adj_fdivr_m64 ord607 ord608 __vbaFPException ord717 __vbaUbound __vbaStrVarVal ord644 _CIlog _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaVarDup __vbaVarCopy ord617 _CIatan __vbaCastObj __vbaAryCopy __vbaStrMove _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

fdaad4eb64eccc6953ff1ce550eae36f_JaffaCakes118

advapi32

kernel32

msvbvm60

generic