JaffaCakes118_78ce19e041faa67ab75a560d21eec820

General

Target
JaffaCakes118_78ce19e041faa67ab75a560d21eec820
Size 936KB
Sample250104-kxtbsasmfz
SHA256 3d66a969bd3e6d40bcc4a84d7cb45fb246e9d3178853a0542c703c5f74f2d9ba
MD5 78ce19e041faa67ab75a560d21eec820
SHA1 ece0b914164189f1b548ae1899d5b4d5f1a812a2
SHA512 98d8c506d33ab0ae03ae228654d7c826ffb070cffff71fcbbca5d3fa5f341e134c829ec9a9194040a9d6fe28642dd946d23d053e85a65ac7c2dea4c40ddce230
SSDEEP 12288:Z7lw1DxRseGQpnmSsR87RAie/kRRU7AAysgfBnnl2:Z7m1DQeB7RAiej7AAysgpnnc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_78ce19e041faa67ab75a560d21eec820

File Explorer

JaffaCakes118_78ce19e041faa67ab75a560d21eec820

.exe 936KB

JaffaCakes118_78ce19e041faa67ab75a560d21eec820

IMPHASH e0de7315beb7d48fb04bf841b6f31c90
SHA256 3d66a969bd3e6d40bcc4a84d7cb45fb246e9d3178853a0542c703c5f74f2d9ba
MD5 78ce19e041faa67ab75a560d21eec820
SHA1 ece0b914164189f1b548ae1899d5b4d5f1a812a2
SHA512 98d8c506d33ab0ae03ae228654d7c826ffb070cffff71fcbbca5d3fa5f341e134c829ec9a9194040a9d6fe28642dd946d23d053e85a65ac7c2dea4c40ddce230
SSDEEP 12288:Z7lw1DxRseGQpnmSsR87RAie/kRRU7AAysgfBnnl2:Z7m1DQeB7RAiej7AAysgpnnc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5764

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaStrErrVarCopy _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct ord593 ord594 __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i _adj_fdivr_m16i ord598 ord520 _CIsin ord632 ord525 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef ord527 __vbaStrCmp __vbaVarTstEq __vbaPutOwner4 __vbaI2I4 DllFunctionCall ord563 _adj_fpatan __vbaRecUniToAnsi EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode __vbaPrintFile ord606 _adj_fprem _adj_fdivr_m64 ord608 ord531 __vbaFPException __vbaInStrVar ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 ord579 __vbaVarAdd __vbaStrToAnsi ord613 ord616 __vbaFpI4 ord617 _CIatan __vbaStrMove ord618 _allmul _CItan __vbaFPInt _CIexp __vbaFreeStr __vbaI4ErrVar __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_78ce19e041faa67ab75a560d21eec820

msvbvm60

generic