JaffaCakes118_367b013635f5e91ae2e62c91c83f5193

General

Target
JaffaCakes118_367b013635f5e91ae2e62c91c83f5193
Size 420KB
Sample251218-xtv3eswkbx
SHA256 cae6ae6d0c710745b95f97676d6b5512043123bca642643fb5f870bfc87ee709
MD5 367b013635f5e91ae2e62c91c83f5193
SHA1 92713f6036f26161c61c9929c8a3d692f3a2dbeb
SHA512 a76d535b6e21bebc7f094f183746487b7375310234d05113014ffdcd4edec6e1786ff83a2bf8c36d70155f46af5a0694643979d9fecab0ee1c4b25ea99469959
SSDEEP 12288:IAkxWQjW1F+GjRaiNcfIIuWSlQ0ensGaT:IBx5jc9siNcwIz07ensH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_367b013635f5e91ae2e62c91c83f5193

File Explorer

JaffaCakes118_367b013635f5e91ae2e62c91c83f5193

.exe 420KB

JaffaCakes118_367b013635f5e91ae2e62c91c83f5193

IMPHASH 8bbe56be552e64d1269338e4dd3da9ff
SHA256 cae6ae6d0c710745b95f97676d6b5512043123bca642643fb5f870bfc87ee709
MD5 367b013635f5e91ae2e62c91c83f5193
SHA1 92713f6036f26161c61c9929c8a3d692f3a2dbeb
SHA512 a76d535b6e21bebc7f094f183746487b7375310234d05113014ffdcd4edec6e1786ff83a2bf8c36d70155f46af5a0694643979d9fecab0ee1c4b25ea99469959
SSDEEP 12288:IAkxWQjW1F+GjRaiNcfIIuWSlQ0ensGaT:IBx5jc9siNcwIz07ensH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

24814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaGosubReturn __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct _adj_fdiv_m16i _adj_fdivr_m16i _CIsin ord631 __vbaErase ord632 __vbaVarZero __vbaChkstk __vbaGosubFree __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaRedim __vbaRecUniToAnsi __vbaUI1I2 _CIsqrt __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI4 ord616 _CIatan __vbaStrMove ord618 __vbaUI1Str __vbaStrVarCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

JaffaCakes118_367b013635f5e91ae2e62c91c83f5193

msvbvm60

generic