JaffaCakes118_7a66563172ad5bc98de4a9d9a8d80080

General

Target
JaffaCakes118_7a66563172ad5bc98de4a9d9a8d80080
Size 540KB
Sample250104-sp4rjsvldw
SHA256 3f782deb0bb75af920032b4af83463ccba0e7b45e45895873a0b9b4398df67ee
MD5 7a66563172ad5bc98de4a9d9a8d80080
SHA1 0574d74511f4bca882d93c27d80f1e9a1f4f0f4b
SHA512 6de416d142c5368a4bfdcc02d78188f44840681ced8ea29a2c868b3bf8ca24a6eedbc91efce03548a68c6bcc6f09246b8030300fb20bd120c0bf24cfcf7e51e1
SSDEEP 12288:Ghxc3TIlqGJs1jpqttRiOsopj8X8TsWELBpGkjrkgbPp2UJSVEtoPC:ucoCyb6aIMTsWAfGONUkgEWP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_7a66563172ad5bc98de4a9d9a8d80080

File Explorer

JaffaCakes118_7a66563172ad5bc98de4a9d9a8d80080

.exe 540KB

JaffaCakes118_7a66563172ad5bc98de4a9d9a8d80080

IMPHASH 661c4907d45724fb5a503013a2522a05
SHA256 3f782deb0bb75af920032b4af83463ccba0e7b45e45895873a0b9b4398df67ee
MD5 7a66563172ad5bc98de4a9d9a8d80080
SHA1 0574d74511f4bca882d93c27d80f1e9a1f4f0f4b
SHA512 6de416d142c5368a4bfdcc02d78188f44840681ced8ea29a2c868b3bf8ca24a6eedbc91efce03548a68c6bcc6f09246b8030300fb20bd120c0bf24cfcf7e51e1
SSDEEP 12288:Ghxc3TIlqGJs1jpqttRiOsopj8X8TsWELBpGkjrkgbPp2UJSVEtoPC:ucoCyb6aIMTsWAfGONUkgEWP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5880

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

ord583 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaCyMul __vbaFreeVar ord694 __vbaStrVarMove ord697 __vbaFreeVarList _adj_fdiv_m64 ord515 _adj_fprem1 ord519 __vbaStrCat ord553 __vbaSetSystemError __vbaHresultCheckObj ord663 ord664 _adj_fdiv_m32 __vbaAryDestruct ord593 __vbaI4Abs ord594 __vbaObjSet ord595 __vbaCyAdd _adj_fdiv_m16i __vbaObjSetAddref ord702 _adj_fdivr_m16i ord703 ord598 __vbaFpR4 ord704 __vbaBoolVar ord705 ord707 _CIsin __vbaChkstk ord526 __vbaCyVar EVENT_SINK_AddRef __vbaStrCmp __vbaAryConstruct2 __vbaCyI4 __vbaObjVar __vbaI2I4 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaLateIdCallLd __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord714 ord608 __vbaFPException __vbaDateVar __vbaI2Var ord538 _CIlog __vbaErrorOverflow __vbaVarLateMemCallLdRf __vbaVar2Vec __vbaNew2 ord648 __vbaR8Str _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList ord682 ord683 _adj_fdivr_m32 ord577 _adj_fdiv_r ord685 ord100 __vbaI4Var ord610 __vbaAryLock __vbaVarAdd ord611 __vbaVarDup __vbaStrToAnsi ord612 __vbaVarCopy __vbaFpI4 __vbaVarLateMemCallLd _CIatan __vbaStrMove ord540 ord541 ord650 _allmul _CItan ord546 __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_7a66563172ad5bc98de4a9d9a8d80080

msvbvm60

generic