JaffaCakes118_be21f6356ff23f3a11c140943c309958

General

Target
JaffaCakes118_be21f6356ff23f3a11c140943c309958
Size 420KB
Sample250208-c78kfssjck
SHA256 d3780e1eccbaa5e58c25b787224c550ca718d56d5f823d18dbd881fdbeb2b5e7
MD5 be21f6356ff23f3a11c140943c309958
SHA1 1865340aff811ed261ba1c6d332b180f1df48986
SHA512 ce87e1970900339a7589e3857658dadebba1eda6b4f90c7d31b6ae4ca8e10acf10be8ba9952c0d31fe8af415b7207175684dac0e66adf0e24f5f2ce78a0743a3
SSDEEP 6144:s402w53EfsTpC2r8vC5NbZuKwCLWMDqkyrP580+90DZYwAACY4Fkz8glngl:k2w5lTpC2Y4JZutM6L5R3DZsY4FTglnC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_be21f6356ff23f3a11c140943c309958

File Explorer

JaffaCakes118_be21f6356ff23f3a11c140943c309958

.exe 420KB

JaffaCakes118_be21f6356ff23f3a11c140943c309958

IMPHASH 17a29cd8a0e82e3bfc73ac363406f5e1
SHA256 d3780e1eccbaa5e58c25b787224c550ca718d56d5f823d18dbd881fdbeb2b5e7
MD5 be21f6356ff23f3a11c140943c309958
SHA1 1865340aff811ed261ba1c6d332b180f1df48986
SHA512 ce87e1970900339a7589e3857658dadebba1eda6b4f90c7d31b6ae4ca8e10acf10be8ba9952c0d31fe8af415b7207175684dac0e66adf0e24f5f2ce78a0743a3
SSDEEP 6144:s402w53EfsTpC2r8vC5NbZuKwCLWMDqkyrP580+90DZYwAACY4Fkz8glngl:k2w5lTpC2Y4JZutM6L5R3DZsY4FTglnC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaEnd __vbaPut3 __vbaFreeVarList _adj_fdiv_m64 __vbaNextEachVar __vbaFreeObjList ord516 _adj_fprem1 ord518 __vbaRecAnsiToUni ord626 __vbaCopyBytes __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar ord666 __vbaAryDestruct __vbaVarForInit ord593 __vbaForEachCollObj ord594 ord595 __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord599 ord520 __vbaBoolVar __vbaBoolVarNull _CIsin ord631 __vbaErase ord632 ord525 __vbaVarZero __vbaNextEachCollObj __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaCyI4 __vbaObjVar __vbaI2I4 DllFunctionCall __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaLateIdCallLd __vbaRedim __vbaUI1ErrVar __vbaRecUniToAnsi EVENT_SINK_Release ord600 ord601 __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaPrintFile ord712 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord537 ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 __vbaInStr __vbaVar2Vec __vbaR8Str __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaFreeStrList ord576 __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 ord579 __vbaVarTstNe __vbaI4Var __vbaLateMemCall __vbaAryLock __vbaVarAdd __vbaVarDup __vbaStrToAnsi __vbaFpI2 ord616 __vbaVarLateMemCallLd __vbaFpI4 ord617 __vbaR8IntI2 _CIatan __vbaAryCopy __vbaStrMove __vbaCastObj __vbaR8IntI4 __vbaForEachVar ord619 _allmul __vbaLateIdSt _CItan __vbaFPInt __vbaUI1Var __vbaAryUnlock __vbaVarForNext _CIexp ord580 __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_be21f6356ff23f3a11c140943c309958

msvbvm60

generic