68c0bdc3971af07a6482a979e9099db5_JaffaCakes118

General

Target
68c0bdc3971af07a6482a979e9099db5_JaffaCakes118
Size 272KB
Sample241022-ebch9avfmc
SHA256 db196a5e4fc91533dfd93b343c504d213e0645ae2b892d54f54a7fb06f3f2a19
MD5 68c0bdc3971af07a6482a979e9099db5
SHA1 a2cbfd3e20fc6015263f13e61b9e215eb83d44a3
SHA512 7d6c8e5fb9fbb63d6dde5dfac530e026e2f499653dc03bdb50600d4bd048aea0c11d8a5fefb1ab0ddc248ff3897532e12d909e3e3644505bd7fbb2a273d6de48
SSDEEP 6144:oBSiBL1Y1NEYMRkjYLvFtSxOTdgW5FTl3XN+u/YerMoC5pJahpcH:oBSiBL1Y1NEYMR3vDSxOqW5FxzYJazcH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68c0bdc3971af07a6482a979e9099db5_JaffaCakes118

File Explorer

68c0bdc3971af07a6482a979e9099db5_JaffaCakes118

.exe 272KB

68c0bdc3971af07a6482a979e9099db5_JaffaCakes118

IMPHASH 4d8006f88a0039fe2410701823b5bf0d
SHA256 db196a5e4fc91533dfd93b343c504d213e0645ae2b892d54f54a7fb06f3f2a19
MD5 68c0bdc3971af07a6482a979e9099db5
SHA1 a2cbfd3e20fc6015263f13e61b9e215eb83d44a3
SHA512 7d6c8e5fb9fbb63d6dde5dfac530e026e2f499653dc03bdb50600d4bd048aea0c11d8a5fefb1ab0ddc248ff3897532e12d909e3e3644505bd7fbb2a273d6de48
SSDEEP 6144:oBSiBL1Y1NEYMRkjYLvFtSxOTdgW5FTl3XN+u/YerMoC5pJahpcH:oBSiBL1Y1NEYMR3vDSxOqW5FxzYJazcH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20312

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

ord183 __vbaVarSub __vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove ord187 __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaCyMul __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaPut3 __vbaEnd _adj_fdiv_m64 ord620 __vbaFreeObjList ord516 ord517 _adj_fprem1 ord518 __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaRecDestruct __vbaHresultCheckObj __vbaLenBstrB ord557 __vbaLenVar _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarXor __vbaVarIndexLoadRefLock ord669 __vbaExitProc __vbaVarForInit __vbaVarPow ord595 __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaVarIndexLoad __vbaStrFixstr ord520 ord307 __vbaBoolVarNull __vbaVarTstLt _CIsin __vbaErase ord632 __vbaVarZero __vbaChkstk ord526 __vbaCyVar __vbaFileClose EVENT_SINK_AddRef ord527 ord528 __vbaCyI2 __vbaStrCmp ord529 __vbaAryConstruct2 __vbaPutOwner3 __vbaVarTstEq __vbaCyI4 __vbaObjVar DllFunctionCall __vbaVarLateMemSt __vbaVarOr ord672 __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaR4Cy __vbaRedim __vbaR8Cy __vbaUI1ErrVar EVENT_SINK_Release ord600 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaFpCmpCy __vbaVarMul __vbaStr2Vec __vbaExceptHandler ord711 __vbaStrToUnicode __vbaPrintFile ord712 ord606 _adj_fprem _adj_fdivr_m64 __vbaVarDiv ord607 ord608 __vbaFPException __vbaInStrVar ord717 __vbaStrVarVal __vbaUbound __vbaGetOwner3 __vbaVarCat ord535 __vbaI2Var ord644 ord537 ord645 _CIlog __vbaFileOpen __vbaVarLateMemCallLdRf ord648 __vbaNew2 __vbaInStr __vbaVar2Vec ord570 __vbaR8Str ord571 _adj_fdiv_m32i ord572 _adj_fdivr_m32i ord573 __vbaStrCopy __vbaI4Str ord681 __vbaFreeStrList ord576 _adj_fdivr_m32 __vbaR8Var __vbaPowerR8 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq __vbaFpCy __vbaLateMemCall __vbaVarAdd __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI2 __vbaVarMod __vbaVarLateMemCallLd __vbaFpI4 __vbaVarCopy ord616 ord617 _CIatan __vbaStrMove ord618 __vbaAryCopy __vbaStrVarCopy __vbaI4Cy __vbaR8IntI4 ord619 ord650 _allmul _CItan __vbaAryUnlock __vbaUI1Var __vbaFPInt __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

68c0bdc3971af07a6482a979e9099db5_JaffaCakes118

msvbvm60

generic