jaffacakes118_Der[.]Areion[.]Weltalmanach[.]2005[.]GERMAN[.]ISO-TBE [.]exe

General

Target
jaffacakes118_Der.Areion.Weltalmanach.2005.GERMAN.ISO-TBE .exe
Size 92KB
Sample260910-c1d29swxex
SHA256 01abd9b8b475efaec15891ca0635551d82d38314c3f6dc052ad76e81d83113ac
MD5 045ceedb0a9bc846b5f4fd8790c4e1a6
SHA1 7522d8a124d863f79dcd0aeb59b478e9d687d8bb
SHA512 ea581570853fc1147c407935bf6c29ed12435233a63960fa3233ec1799a6d1e9a6d48ec7590521474fe37a19426872d1d4642caa060dcaf4bab4f4932fd6fbb5
SSDEEP 1536:nQ0nT/SU+QNFHq3J1ywKYdVztzu5Gr4LU6+TGt0qkKuLE+OiLDnDxYD:HnTKU+8FYCYrZzu5Gct0qkKS71nDx0
TLSH
T1A093F876B744E06AF10685722825E2666D293C371401EC03BB47DF693A746E3E8F972F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Der.Areion.Weltalmanach.2005.GERMAN.ISO-TBE .exe

File Explorer

jaffacakes118_Der.Areion.Weltalmanach.2005.GERMAN.ISO-TBE .exe

.exe 92KB

jaffacakes118_Der.Areion.Weltalmanach.2005.GERMAN.ISO-TBE .exe

IMPHASH 76c83aef9e5e9d1bd9fadab18e711002
SHA256 01abd9b8b475efaec15891ca0635551d82d38314c3f6dc052ad76e81d83113ac
MD5 045ceedb0a9bc846b5f4fd8790c4e1a6
SHA1 7522d8a124d863f79dcd0aeb59b478e9d687d8bb
SHA512 ea581570853fc1147c407935bf6c29ed12435233a63960fa3233ec1799a6d1e9a6d48ec7590521474fe37a19426872d1d4642caa060dcaf4bab4f4932fd6fbb5
SSDEEP 1536:nQ0nT/SU+QNFHq3J1ywKYdVztzu5Gr4LU6+TGt0qkKuLE+OiLDnDxYD:HnTKU+8FYCYrZzu5Gct0qkKS71nDx0
TLSH
T1A093F876B744E06AF10685722825E2666D293C371401EC03BB47DF693A746E3E8F972F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6484

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaR8FixI4 __vbaVarTstGt _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaGosubReturn __vbaLenBstr __vbaStrVarMove __vbaFreeVarList __vbaEnd __vbaPut3 _adj_fdiv_m64 __vbaNextEachVar __vbaRaiseEvent __vbaFreeObjList _adj_fprem1 ord518 __vbaRecAnsiToUni __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar ord667 __vbaAryDestruct __vbaExitProc ord593 __vbaVarForInit ord594 __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i _adj_fdivr_m16i __vbaVarIndexLoad __vbaStrFixstr __vbaBoolVarNull _CIsin ord631 __vbaErase ord632 __vbaVarZero __vbaChkstk __vbaGosubFree ord526 __vbaFileClose EVENT_SINK_AddRef ord529 __vbaGet3 __vbaStrCmp __vbaPutOwner3 __vbaAryConstruct2 __vbaVarTstEq DllFunctionCall __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord601 _CIsqrt EVENT_SINK_QueryInterface __vbaStr2Vec __vbaExceptHandler ord711 __vbaPrintFile ord712 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 ord716 ord531 __vbaFPException __vbaInStrVar ord717 __vbaGetOwner3 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var ord537 ord644 _CIlog __vbaFileOpen ord648 ord570 __vbaInStr __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaVarNot __vbaFreeStrList ord576 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord578 ord685 ord100 __vbaVarTstNe ord579 __vbaVarSetVar __vbaI4Var __vbaVarCmpEq __vbaVarAdd __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaVarMod __vbaVarLateMemCallLd __vbaFpI4 ord616 _CIatan __vbaAryCopy ord618 __vbaUI1Str __vbaStrMove __vbaForEachVar ord619 __vbaR8IntI4 __vbaStrVarCopy _allmul _CItan __vbaUI1Var __vbaAryUnlock __vbaVarForNext _CIexp ord580 __vbaFreeObj __vbaFreeStr

Sharing