d07ea7cdad0487bb7bc0cd64330a89f3_JaffaCakes118

General

Target
d07ea7cdad0487bb7bc0cd64330a89f3_JaffaCakes118
Size 356KB
Sample241207-d9wt4strfx
SHA256 8bef4e95bce87f7580bd453b8e4ef5a434d1587d9bb98a2b550154349c92b612
MD5 d07ea7cdad0487bb7bc0cd64330a89f3
SHA1 93cef7b5767f493612601e0d0633247afd37f8a6
SHA512 4f47a9b8fdf4a8174a9810ac16c502175e003d47b881ffea41776f9c1919f26e7208e880eea485a678846fa5296116fd134ed9cb1bdd86d2349bd73987d418f4
SSDEEP 3072:S67xyu1EPgm3zXf1q699t5bF2z7yhkHa6Zt29mAk+TGc4:SuxX63f1f9t5p5h2a6ZeL3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d07ea7cdad0487bb7bc0cd64330a89f3_JaffaCakes118

File Explorer

d07ea7cdad0487bb7bc0cd64330a89f3_JaffaCakes118

.exe 356KB

d07ea7cdad0487bb7bc0cd64330a89f3_JaffaCakes118

IMPHASH 321218565a2c0073229919d84fd53329
SHA256 8bef4e95bce87f7580bd453b8e4ef5a434d1587d9bb98a2b550154349c92b612
MD5 d07ea7cdad0487bb7bc0cd64330a89f3
SHA1 93cef7b5767f493612601e0d0633247afd37f8a6
SHA512 4f47a9b8fdf4a8174a9810ac16c502175e003d47b881ffea41776f9c1919f26e7208e880eea485a678846fa5296116fd134ed9cb1bdd86d2349bd73987d418f4
SSDEEP 3072:S67xyu1EPgm3zXf1q699t5bF2z7yhkHa6Zt29mAk+TGc4:SuxX63f1f9t5p5h2a6ZeL3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5076

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaHresultCheck __vbaVarMove __vbaFreeVar __vbaStrVarMove ord588 __vbaFreeVarList ord697 __vbaEnd _adj_fdiv_m64 __vbaFreeObjList _adj_fprem1 __vbaSetSystemError __vbaHresultCheckObj ord557 _adj_fdiv_m32 ord667 __vbaAryDestruct ord593 __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord703 ord704 ord705 ord706 __vbaFpR8 _CIsin ord525 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaI2I4 __vbaObjVar DllFunctionCall ord564 _adj_fpatan ord569 __vbaLateIdCallLd ord677 __vbaRedim EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode ord713 _adj_fprem _adj_fdivr_m64 ord716 __vbaFPException ord536 _CIlog __vbaErrorOverflow __vbaNew2 ord570 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord680 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaLateMemCall __vbaVarDup __vbaStrToAnsi ord612 ord613 __vbaLateMemCallLd _CIatan __vbaStrMove ord542 _allmul __vbaLateIdSt _CItan ord546 _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

d07ea7cdad0487bb7bc0cd64330a89f3_JaffaCakes118

msvbvm60

generic