JaffaCakes118_40bba877e43c9e6e3295c9e67c86be72

General

Target
JaffaCakes118_40bba877e43c9e6e3295c9e67c86be72
Size 104KB
Sample250127-sa9dgstnas
SHA256 c2573a60405a6a8d9c116bba2a30a8baaad7c6267c430bd0b025ab2c4077e5d6
MD5 40bba877e43c9e6e3295c9e67c86be72
SHA1 eef1454224ace1090eb9775f345a6a29e17e0232
SHA512 0bb817d0b147fead4730882dc2d7e66469a987bed253c97119b58a91936837ca8f76b3ebae4b4c1b67fc1151b89549bf25ce3d8db70aa83d8a3eaf7e535ef418
SSDEEP 3072:hJSO2TX74ZJrhlyvtn60CDQlEIABiSFmDmQw:j1H/wiDQlEIABiSoDmb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_40bba877e43c9e6e3295c9e67c86be72

File Explorer

JaffaCakes118_40bba877e43c9e6e3295c9e67c86be72

.exe 104KB

JaffaCakes118_40bba877e43c9e6e3295c9e67c86be72

IMPHASH e0aa0d3d8727f6de85a11b54b3c02cc1
SHA256 c2573a60405a6a8d9c116bba2a30a8baaad7c6267c430bd0b025ab2c4077e5d6
MD5 40bba877e43c9e6e3295c9e67c86be72
SHA1 eef1454224ace1090eb9775f345a6a29e17e0232
SHA512 0bb817d0b147fead4730882dc2d7e66469a987bed253c97119b58a91936837ca8f76b3ebae4b4c1b67fc1151b89549bf25ce3d8db70aa83d8a3eaf7e535ef418
SSDEEP 3072:hJSO2TX74ZJrhlyvtn60CDQlEIABiSFmDmQw:j1H/wiDQlEIABiSoDmb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5884

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaNextEachVar __vbaFreeObjList _adj_fprem1 ord626 __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc __vbaVarForInit ord593 ord594 __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i _adj_fdivr_m16i __vbaVargVar _CIsin __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef ord528 __vbaStrCmp __vbaPutOwner3 __vbaObjVar DllFunctionCall _adj_fpatan __vbaFixstrConstruct EVENT_SINK_Release ord600 _CIsqrt __vbaObjIs EVENT_SINK_QueryInterface __vbaVarMul __vbaExceptHandler ord712 __vbaStrToUnicode __vbaPrintFile _adj_fprem _adj_fdivr_m64 ord608 ord716 __vbaFPException ord717 __vbaInStrVar __vbaStrVarVal __vbaVarCat __vbaLsetFixstrFree __vbaI2Var ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaVar2Vec ord648 __vbaVarLateMemCallLdRf __vbaVarInt _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaVarSetVar __vbaVarAdd __vbaLateMemCall __vbaVarDup __vbaStrToAnsi ord616 __vbaVarCopy __vbaVarLateMemCallLd __vbaUnkVar __vbaR8IntI2 __vbaVarSetObjAddref _CIatan __vbaStrMove __vbaStrVarCopy __vbaForEachVar _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr ord580

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_40bba877e43c9e6e3295c9e67c86be72

msvbvm60

generic