jaffacakes118_CloneDVD Mobile v[.]1[.]7[.]0[.]5 beta[.]exe

General

Target
jaffacakes118_CloneDVD Mobile v.1.7.0.5 beta.exe
Size 500KB
Sample260910-fa5dbafe53
SHA256 f01a46c69175f9684c65a6b8f703d61a75cbc00c60dc8779d68c40856a6b86e7
MD5 292a8600d25a59702b688bda91d2a847
SHA1 fcccd2f355f3d7041608d7996faf7f952be1c01c
SHA512 6ac214660391777314f10635d6803456678503c79ba95a86e59f64067f90894e3d598da2946ad1b68f137c8c86b34ba7be8169fe211a4739333d2a83dc4eb69a
SSDEEP 12288:kTuELksQeG+970Do0bHRjT9XcVp9n6R7ZmDsv/:guELksFql9TyVp9n6R7IS/
TLSH
T15AB4D0A2F3D1F982F02902B03E5BC2E86155BC325462572B76C6775F273628B6372B17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_CloneDVD Mobile v.1.7.0.5 beta.exe

File Explorer

jaffacakes118_CloneDVD Mobile v.1.7.0.5 beta.exe

.exe 500KB

jaffacakes118_CloneDVD Mobile v.1.7.0.5 beta.exe

IMPHASH f9499df8e8f7cb92e7aa508447a7e987
SHA256 f01a46c69175f9684c65a6b8f703d61a75cbc00c60dc8779d68c40856a6b86e7
MD5 292a8600d25a59702b688bda91d2a847
SHA1 fcccd2f355f3d7041608d7996faf7f952be1c01c
SHA512 6ac214660391777314f10635d6803456678503c79ba95a86e59f64067f90894e3d598da2946ad1b68f137c8c86b34ba7be8169fe211a4739333d2a83dc4eb69a
SSDEEP 12288:kTuELksQeG+970Do0bHRjT9XcVp9n6R7ZmDsv/:guELksFql9TyVp9n6R7IS/
TLSH
T15AB4D0A2F3D1F982F02902B03E5BC2E86155BC325462572B76C6775F273628B6372B17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6292

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaVarTstGt ord690 __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLineInputStr ord588 __vbaLenBstr __vbaStrVarMove __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaRaiseEvent __vbaNextEachVar __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni ord518 ord626 __vbaCopyBytes __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj ord665 _adj_fdiv_m32 __vbaAryVar __vbaVarTstLe __vbaAryDestruct __vbaLateMemSt __vbaVarIndexLoadRefLock __vbaForEachCollObj ord593 __vbaExitProc __vbaVarForInit ord594 __vbaObjSet ord595 __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord598 __vbaStrFixstr __vbaBoolVarNull __vbaRefVarAry __vbaVarTstLt _CIsin __vbaErase ord631 __vbaNextEachCollObj __vbaVarZero ord632 __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaI2I4 __vbaObjVar DllFunctionCall __vbaVarLateMemSt __vbaFpUI1 __vbaCastObjVar __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaRedim __vbaUI1ErrVar __vbaRecUniToAnsi EVENT_SINK_Release ord601 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler ord711 __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord607 ord608 __vbaFPException ord717 __vbaInStrVar __vbaUbound __vbaStrVarVal __vbaVarCat ord535 __vbaI2Var ord644 ord537 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 __vbaNew2 __vbaVarLateMemCallLdRf __vbaVar2Vec ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaAryLock __vbaLateMemCall __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaVarMod __vbaVarTstGe ord616 __vbaVarCopy __vbaVarLateMemCallLd __vbaFpI4 __vbaLateMemCallLd ord617 _CIatan __vbaCastObj __vbaAryCopy __vbaStrMove __vbaR8IntI4 __vbaForEachVar _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp ord580 __vbaFreeStr __vbaFreeObj ord581

Sharing