JaffaCakes118_790cc414d59d606495f9c942ab7f2d2d

General

Target
JaffaCakes118_790cc414d59d606495f9c942ab7f2d2d
Size 888KB
Sample250202-e78assxmdm
SHA256 ae3b0ec48c6fe450677181f97d83fee2092d578c796012d9273721e3b19e3a32
MD5 790cc414d59d606495f9c942ab7f2d2d
SHA1 ebafafe5576bb96a59ead7168c44168e3e29f675
SHA512 7adb31700ad13d2fdb4f64e83a8fff278bc474021932a087a67756009d8c7ca8cc509672f656a973ccd99916ea67dc019ceec1cb743bccd1144856cf4fd7f68a
SSDEEP 24576:Ybk6gx3bh5ISCIuTPCuVRdnlef5Ls3nNPFUySs8Ky:x3bh5ISCIuTPCuV3lAu9WzB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_790cc414d59d606495f9c942ab7f2d2d

File Explorer

JaffaCakes118_790cc414d59d606495f9c942ab7f2d2d

.exe 888KB

JaffaCakes118_790cc414d59d606495f9c942ab7f2d2d

IMPHASH 57d98a2bee6393a1ee4e8f3e11075f12
SHA256 ae3b0ec48c6fe450677181f97d83fee2092d578c796012d9273721e3b19e3a32
MD5 790cc414d59d606495f9c942ab7f2d2d
SHA1 ebafafe5576bb96a59ead7168c44168e3e29f675
SHA512 7adb31700ad13d2fdb4f64e83a8fff278bc474021932a087a67756009d8c7ca8cc509672f656a973ccd99916ea67dc019ceec1cb743bccd1144856cf4fd7f68a
SSDEEP 24576:Ybk6gx3bh5ISCIuTPCuVRdnlef5Ls3nNPFUySs8Ky:x3bh5ISCIuTPCuV3lAu9WzB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaRecDestruct __vbaHresultCheckObj _adj_fdiv_m32 ord666 __vbaAryVar __vbaAryDestruct ord593 ord594 __vbaOnError ord595 _adj_fdiv_m16i _adj_fdivr_m16i ord598 ord520 _CIsin ord631 __vbaErase __vbaVarCmpGt __vbaVarZero ord632 __vbaChkstk __vbaFileClose __vbaGenerateBoundsError __vbaStrCmp __vbaPutOwner3 __vbaVarTstEq __vbaAryConstruct2 __vbaI2I4 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaUI1ErrVar __vbaRecUniToAnsi __vbaUI1I2 _CIsqrt __vbaExceptHandler _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException __vbaInStrVar ord717 __vbaGetOwner3 __vbaUbound __vbaStrVarVal __vbaVarCat ord535 ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaR8Str ord648 __vbaNew2 __vbaInStr __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord578 ord100 __vbaI4Var __vbaVarCmpEq __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaAryVarVarg __vbaFpI4 __vbaRecDestructAnsi ord617 _CIatan __vbaStrMove __vbaAryCopy ord619 __vbaStrVarCopy _allmul _CItan __vbaAryUnlock __vbaFPInt _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_790cc414d59d606495f9c942ab7f2d2d

msvbvm60

generic