JaffaCakes118_7afc6d24be8597a755b2c186042e1274

General

Target
JaffaCakes118_7afc6d24be8597a755b2c186042e1274
Size 260KB
Sample250104-wbc88a1rhl
SHA256 10448b62b88d14b89c991cdf0a16df16b6b2093d150b17a525695c6586a867ff
MD5 7afc6d24be8597a755b2c186042e1274
SHA1 11486e29324e2c66f7f5881f4579fd94142b1bdc
SHA512 2baac267f63317d29e1f769217676386977f02db164b82982f31362648ae5693032cacbe5d9bb665d4a7b2bb596266de5091a4130543a9f0df0d4f2675431ae3
SSDEEP 6144:sQaebYyFI08UsCpCqVu4eqsIIJ3aKl06pZoZ4Tv2QxQWnaJptxAco:JcIg3a36vY4TeQxjnexAc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_7afc6d24be8597a755b2c186042e1274

File Explorer

JaffaCakes118_7afc6d24be8597a755b2c186042e1274

.exe 260KB

JaffaCakes118_7afc6d24be8597a755b2c186042e1274

IMPHASH 0befeb5d068b5a8db01150dfce52219f
SHA256 10448b62b88d14b89c991cdf0a16df16b6b2093d150b17a525695c6586a867ff
MD5 7afc6d24be8597a755b2c186042e1274
SHA1 11486e29324e2c66f7f5881f4579fd94142b1bdc
SHA512 2baac267f63317d29e1f769217676386977f02db164b82982f31362648ae5693032cacbe5d9bb665d4a7b2bb596266de5091a4130543a9f0df0d4f2675431ae3
SSDEEP 6144:sQaebYyFI08UsCpCqVu4eqsIIJ3aKl06pZoZ4Tv2QxQWnaJptxAco:JcIg3a36vY4TeQxjnexAc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60.dll

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList ord516 _adj_fprem1 __vbaCopyBytes __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj ord665 _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaExitProc __vbaObjSet __vbaOnError ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i _CIsin __vbaErase ord632 __vbaVarZero __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaStrCmp __vbaAryConstruct2 DllFunctionCall __vbaLbound _adj_fpatan __vbaRedim __vbaUI1ErrVar EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaStr2Vec __vbaExceptHandler ord711 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaStrVarVal __vbaUbound __vbaVarCat ord644 ord645 _CIlog __vbaFileOpen __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord578 ord100 __vbaVarAdd __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaFpI4 ord617 _CIatan __vbaAryCopy __vbaStrMove __vbaR8IntI4 ord650 _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr __vbaI4ErrVar

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_7afc6d24be8597a755b2c186042e1274

msvbvm60.dll

generic