3b75a853721054a2e50d4949df21f337_JaffaCakes118

General

Target
3b75a853721054a2e50d4949df21f337_JaffaCakes118
Size 84KB
Sample241012-w3pfkavbla
SHA256 64848eb9bb62df5f7961c56c3abfd00a9920fdab1a006d71582b8d007d5a1d99
MD5 3b75a853721054a2e50d4949df21f337
SHA1 be5e5a378b65be65c2d02a625548b7e626077ff6
SHA512 6746c94333ac508de93246a801920c815cd3681c2c3359fda034cf28843ccd463b16b2e73e61b1ed80be07c1c8f3a19e2b14d6e1f5c915a9a79171995e189ae6
SSDEEP 1536:29BL5SjjDQmnGOsKpY7/jzT4DFILCEEtL9zypW/3OtaGR1c/:29rSjjkmbY7/j4BILU9m4yRK/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b75a853721054a2e50d4949df21f337_JaffaCakes118

File Explorer

3b75a853721054a2e50d4949df21f337_JaffaCakes118

.exe 84KB

3b75a853721054a2e50d4949df21f337_JaffaCakes118

IMPHASH a81b79062e1f6379ee1b3f07d22cb293
SHA256 64848eb9bb62df5f7961c56c3abfd00a9920fdab1a006d71582b8d007d5a1d99
MD5 3b75a853721054a2e50d4949df21f337
SHA1 be5e5a378b65be65c2d02a625548b7e626077ff6
SHA512 6746c94333ac508de93246a801920c815cd3681c2c3359fda034cf28843ccd463b16b2e73e61b1ed80be07c1c8f3a19e2b14d6e1f5c915a9a79171995e189ae6
SSDEEP 1536:29BL5SjjDQmnGOsKpY7/jzT4DFILCEEtL9zypW/3OtaGR1c/:29rSjjkmbY7/j4BILU9m4yRK/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree ord187 __vbaFreeVar ord587 __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaVarCmpNe __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit ord300 __vbaObjSet ord595 __vbaOnError _adj_fdiv_m16i ord303 _adj_fdivr_m16i ord598 ord599 ord306 ord307 ord309 __vbaBoolVarNull __vbaVarTstLt _CIsin __vbaErase ord709 ord632 __vbaVarZero __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaPutOwner3 __vbaVarLikeVar DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaLateIdCallLd __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaStr2Vec __vbaExceptHandler ord711 __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 __vbaI2Str ord608 __vbaFPException __vbaInStrVar ord318 ord717 __vbaStrVarVal __vbaUbound __vbaVarCat __vbaI2Var ord644 _CIlog __vbaFileOpen __vbaR8Str ord570 __vbaVar2Vec __vbaNew2 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaVarAdd __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI4 __vbaVarCopy ord616 ord617 _CIatan __vbaStrMove ord618 __vbaAryCopy __vbaStrVarCopy ord650 _allmul __vbaLenVarB _CItan __vbaUI1Var __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeStr __vbaI4ErrVar __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

3b75a853721054a2e50d4949df21f337_JaffaCakes118

msvbvm60

generic