5cfe0e374b82c0c2867d16cad2cc7dfe_JaffaCakes118

General

Target
5cfe0e374b82c0c2867d16cad2cc7dfe_JaffaCakes118
Size 444KB
Sample241019-rdvtts1hlr
SHA256 2bd03db19b3e4663a914f26637f504ab8b80901832ace8ea05014ac0f4447710
MD5 5cfe0e374b82c0c2867d16cad2cc7dfe
SHA1 0c60d81880920d5fd6d4efb2c11ea7801894d3ac
SHA512 895ab6f44f321c48c8f21692c82d016eefcb2c3b407ab226e08dbe839128da7a562e553f2400de9522aabac1820dac5410acb77038e1458e54a65cae174dfdf9
SSDEEP 12288:9FoQQQRghfoWytZzgQzZfKdQJMM8d1txCzUchSeX1yVZGFl8:9FoQQQRghfkLKdQJ38RshSqsVZc8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cfe0e374b82c0c2867d16cad2cc7dfe_JaffaCakes118

File Explorer

5cfe0e374b82c0c2867d16cad2cc7dfe_JaffaCakes118

.exe 444KB

5cfe0e374b82c0c2867d16cad2cc7dfe_JaffaCakes118

IMPHASH ed8495f3b69fb92f5dcfe857b0cb9232
SHA256 2bd03db19b3e4663a914f26637f504ab8b80901832ace8ea05014ac0f4447710
MD5 5cfe0e374b82c0c2867d16cad2cc7dfe
SHA1 0c60d81880920d5fd6d4efb2c11ea7801894d3ac
SHA512 895ab6f44f321c48c8f21692c82d016eefcb2c3b407ab226e08dbe839128da7a562e553f2400de9522aabac1820dac5410acb77038e1458e54a65cae174dfdf9
SSDEEP 12288:9FoQQQRghfoWytZzgQzZfKdQJMM8d1txCzUchSeX1yVZGFl8:9FoQQQRghfkLKdQJ38RshSqsVZc8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5892

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaPut3 __vbaEnd _adj_fdiv_m64 __vbaNextEachVar __vbaFreeObjList ord517 _adj_fprem1 ord626 __vbaForEachCollAd __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord666 ord667 __vbaAryDestruct ord593 __vbaExitProc ord594 __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord598 __vbaCyStr __vbaRefVarAry _CIsin __vbaErase ord631 __vbaVarZero ord632 __vbaChkstk __vbaFileClose __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaObjVar DllFunctionCall _adj_fpatan __vbaFixstrConstruct __vbaRedim ord600 ord601 _CIsqrt __vbaExceptHandler __vbaStrToUnicode ord713 _adj_fprem _adj_fdivr_m64 ord607 __vbaI2Str __vbaFPException __vbaInStrVar ord717 __vbaStrVarVal __vbaUbound ord535 ord644 __vbaExitEachVar _CIlog __vbaFileOpen __vbaInStr ord648 __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaAryLock __vbaStrToAnsi __vbaVarCopy ord616 __vbaFpI4 __vbaLateMemCallLd ord617 _CIatan __vbaStrMove __vbaForEachVar ord619 _allmul _CItan __vbaNextEachCollAd __vbaAryUnlock __vbaFPInt _CIexp __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

5cfe0e374b82c0c2867d16cad2cc7dfe_JaffaCakes118

msvbvm60

generic