dd052c3073b8f29720d0a20b96b932ad_JaffaCakes118

General

Target
dd052c3073b8f29720d0a20b96b932ad_JaffaCakes118
Size 240KB
Sample241210-e5ssbstnds
SHA256 c158c37fd4b94dc68470343fc1753c1d2e5b117294a151c28de14af5ef246e04
MD5 dd052c3073b8f29720d0a20b96b932ad
SHA1 09bbe2f8b18d04486319f0215b629f2a1b5da3bb
SHA512 a1bac3159c743271b9dac992aa0fdc8f1268140dfceccf8b757a048fca97adf9dcfbf1ae667e289751dbebcec108de672e05768139c8b3271a57ec23134fbe02
SSDEEP 6144:TFEZhgTJvIzboy9WEcUMDNjaEsiIW3YgXP:TFjyUy9WoMxOEsFOXXP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd052c3073b8f29720d0a20b96b932ad_JaffaCakes118

File Explorer

dd052c3073b8f29720d0a20b96b932ad_JaffaCakes118

.exe 240KB

dd052c3073b8f29720d0a20b96b932ad_JaffaCakes118

IMPHASH 6589e1a1f9a53f863b9079381d44a40c
SHA256 c158c37fd4b94dc68470343fc1753c1d2e5b117294a151c28de14af5ef246e04
MD5 dd052c3073b8f29720d0a20b96b932ad
SHA1 09bbe2f8b18d04486319f0215b629f2a1b5da3bb
SHA512 a1bac3159c743271b9dac992aa0fdc8f1268140dfceccf8b757a048fca97adf9dcfbf1ae667e289751dbebcec108de672e05768139c8b3271a57ec23134fbe02
SSDEEP 6144:TFEZhgTJvIzboy9WEcUMDNjaEsiIW3YgXP:TFjyUy9WoMxOEsFOXXP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8668

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaVarIdiv __vbaEnd _adj_fdiv_m64 ord516 _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaI2Abs __vbaCopyBytes __vbaResume __vbaVarCmpNe __vbaStrCat ord660 __vbaRecDestruct __vbaSetSystemError _adj_fdiv_m32 __vbaAryVar __vbaVarCmpGe __vbaAryDestruct __vbaVarPow __vbaExitProc __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i __vbaVarIndexLoad ord598 _CIsin ord631 __vbaErase __vbaVarCmpGt ord632 __vbaVarZero __vbaChkstk ord526 __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall ord670 __vbaVarOr _adj_fpatan __vbaRedim __vbaRecUniToAnsi ord601 __vbaUI1I2 _CIsqrt __vbaVarAnd __vbaVarMul __vbaExceptHandler ord711 __vbaStrToUnicode ord712 ord713 _adj_fprem _adj_fdivr_m64 __vbaVarDiv ord608 __vbaVarCmpLe __vbaFPException ord717 __vbaStrVarVal __vbaUbound __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaInStr ord649 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaI4Str __vbaVarCmpLt __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord100 __vbaI4Var __vbaVarCmpEq __vbaAryLock __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaVarMod __vbaFpI4 __vbaVarCopy ord616 ord617 _CIatan __vbaUI1Str __vbaAryCopy __vbaStrMove ord619 _allmul _CItan ord546 __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

dd052c3073b8f29720d0a20b96b932ad_JaffaCakes118

msvbvm60

generic