jaffacakes118__84cb00424196a08061f50c4092b205f4

General

Target
jaffacakes118__84cb00424196a08061f50c4092b205f4
Size 64KB
Sample260919-kce9esdb78
SHA256 8b119a3102fb270d93ffe953fa2a3ee694c4d7d73cb77d2a4b7c4b798dfc791c
MD5 84cb00424196a08061f50c4092b205f4
SHA1 82dc262464972b5b8afa2c16fb27bea4a53a7c34
SHA512 c47813c16ee43c22c60a2659550d428979eb9d7ffe1f96a5bc7589d0bed2de3759cf49fa64f71b3eec41cf547354e5d1987dcde369ac4d18eb2c4ce1ccd63307
SSDEEP 768:3IgGWJ/jvqe4Op2iCf0tFayBVg5z6FYdLwKUoVvG7HNQWWEqPyGrK:3Ig3/bZHFMkAJBv27xgyGrK
TLSH
T18453A425F2DBC13FF5C545B026ABEBAA18283E324A40D16FB786FB4C3A754D58421727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__84cb00424196a08061f50c4092b205f4

File Explorer

jaffacakes118__84cb00424196a08061f50c4092b205f4

.dll 64KB

jaffacakes118__84cb00424196a08061f50c4092b205f4

IMPHASH 5c2d3273f4eff578d27c46dc6ed807c1
SHA256 8b119a3102fb270d93ffe953fa2a3ee694c4d7d73cb77d2a4b7c4b798dfc791c
MD5 84cb00424196a08061f50c4092b205f4
SHA1 82dc262464972b5b8afa2c16fb27bea4a53a7c34
SHA512 c47813c16ee43c22c60a2659550d428979eb9d7ffe1f96a5bc7589d0bed2de3759cf49fa64f71b3eec41cf547354e5d1987dcde369ac4d18eb2c4ce1ccd63307
SSDEEP 768:3IgGWJ/jvqe4Op2iCf0tFayBVg5z6FYdLwKUoVvG7HNQWWEqPyGrK:3Ig3/bZHFMkAJBv27xgyGrK
TLSH
T18453A425F2DBC13FF5C545B026ABEBAA18283E324A40D16FB786FB4C3A754D58421727
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6564

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaLineInputStr __vbaStrVarMove __vbaAptOffset __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 ord519 __vbaStrCat ord553 __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar __vbaVargVarCopy _adj_fdiv_m32 __vbaVarTstLe __vbaAryDestruct EVENT_SINK2_Release ord593 __vbaExitProc ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i ord598 ord520 __vbaBoolVar _CIsin ord631 ord525 __vbaVargVarMove __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError ord528 __vbaStrCmp __vbaVarTstEq __vbaI2I4 DllFunctionCall __vbaStrR4 _adj_fpatan __vbaFixstrConstruct EVENT_SINK_Release ord600 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaStr2Vec __vbaExceptHandler __vbaPrintFile __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaI2Str ord608 __vbaFPException __vbaStrVarVal __vbaVarCat ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 __vbaInStr ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy EVENT_SINK2_AddRef ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 __vbaVarTstNe ord101 ord102 __vbaI4Var ord103 ord104 ord105 __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaVarCopy ord616 ord617 _CIatan __vbaStrMove __vbaI2ErrVar __vbaR8IntI4 __vbaStrVarCopy ord542 _allmul ord545 _CItan ord546 __vbaAryUnlock __vbaFPInt _CIexp __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__84cb00424196a08061f50c4092b205f4

msvbvm60

generic