JaffaCakes118_b144fa6eea0fea2d26f28c668549683c

General

Target
JaffaCakes118_b144fa6eea0fea2d26f28c668549683c
Size 308KB
Sample250207-bfb7havlfk
SHA256 9fa9ea402acd9dbe2effc3024296f1329258fadbb957b847e80ce6a8ad3629d2
MD5 b144fa6eea0fea2d26f28c668549683c
SHA1 050f496226ca3dd72e2b81e9362665b384cbdf15
SHA512 ba65b3234c2a375612bf806fff3795700ee2bf162c6c857834cc07c2fe0ee0018c50f1c8253d3b1114e02189055a27a7c6f39c9304e69c9649f4d43fc45312b5
SSDEEP 6144:/4q5QGOGmlCQcNT262ehSojIU5IJJpFrUEM5Qi3d5Kft:/4nGSebkUqJTZAQm+t
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b144fa6eea0fea2d26f28c668549683c

File Explorer

JaffaCakes118_b144fa6eea0fea2d26f28c668549683c

.exe 308KB

JaffaCakes118_b144fa6eea0fea2d26f28c668549683c

IMPHASH 8c13d6437b51fe7e524c0a2124d23bb1
SHA256 9fa9ea402acd9dbe2effc3024296f1329258fadbb957b847e80ce6a8ad3629d2
MD5 b144fa6eea0fea2d26f28c668549683c
SHA1 050f496226ca3dd72e2b81e9362665b384cbdf15
SHA512 ba65b3234c2a375612bf806fff3795700ee2bf162c6c857834cc07c2fe0ee0018c50f1c8253d3b1114e02189055a27a7c6f39c9304e69c9649f4d43fc45312b5
SSDEEP 6144:/4q5QGOGmlCQcNT262ehSojIU5IJJpFrUEM5Qi3d5Kft:/4nGSebkUqJTZAQm+t
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6268

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

CallWindowProcW

kernel32

LoadLibraryA

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct ord593 __vbaForEachCollObj __vbaExitProc __vbaObjSet __vbaOnError ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad __vbaBoolVar ord520 __vbaBoolVarNull _CIsin ord631 __vbaErase __vbaVarZero __vbaNextEachCollObj __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaLateIdCallLd __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaI2Var ord644 ord537 _CIlog __vbaErrorOverflow __vbaVar2Vec __vbaR8Str __vbaNew2 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 ord579 __vbaVarTstNe __vbaI4Var __vbaAryLock __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaFpI2 __vbaFpI4 __vbaVarLateMemCallLd ord616 __vbaR8IntI2 _CIatan __vbaAryCopy __vbaStrMove __vbaCastObj ord618 ord619 __vbaStrVarCopy _allmul __vbaLateIdSt _CItan __vbaUI1Var __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_b144fa6eea0fea2d26f28c668549683c

user32

kernel32

msvbvm60

generic