jaffacakes118__8dd8f5d20365741da6cc0739dd6e63f6

General

Target
jaffacakes118__8dd8f5d20365741da6cc0739dd6e63f6
Size 96KB
Sample260919-mt4pfszthy
SHA256 beb3aec6798a666df7c258b474e2cf47e358d6421d9cf49003f3d8eec45fdc57
MD5 8dd8f5d20365741da6cc0739dd6e63f6
SHA1 70bd7b64f0ae630c7c162cf9c44bb44a74848994
SHA512 eb44b700d14e4674a6dd42868469eb39c3617399e38252ed4146d26538969afbd8b20c247097cced927d3de111e22218f283d7353fdd221e418904489163e8cc
SSDEEP 1536:bujPJ1Hegc7hoqH41yBJzjeZf53dPlmiBfW:yPJ1HegmyyTzjeZf53d9miRW
TLSH
T1A6A31313F135D646FAED40B12A78A0AC2C9A7D3212658D1FB389370B317495BF7A1B27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__8dd8f5d20365741da6cc0739dd6e63f6

File Explorer

jaffacakes118__8dd8f5d20365741da6cc0739dd6e63f6

.exe 96KB

jaffacakes118__8dd8f5d20365741da6cc0739dd6e63f6

IMPHASH 98534009d886bf57b616914c2dae5049
SHA256 beb3aec6798a666df7c258b474e2cf47e358d6421d9cf49003f3d8eec45fdc57
MD5 8dd8f5d20365741da6cc0739dd6e63f6
SHA1 70bd7b64f0ae630c7c162cf9c44bb44a74848994
SHA512 eb44b700d14e4674a6dd42868469eb39c3617399e38252ed4146d26538969afbd8b20c247097cced927d3de111e22218f283d7353fdd221e418904489163e8cc
SSDEEP 1536:bujPJ1Hegc7hoqH41yBJzjeZf53dPlmiBfW:yPJ1HegmyyTzjeZf53d9miRW
TLSH
T1A6A31313F135D646FAED40B12A78A0AC2C9A7D3212658D1FB389370B317495BF7A1B27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6760

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 __vbaStrErrVarCopy _adj_fprem1 __vbaStrCat ord660 __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 ord667 __vbaVarForInit __vbaOnError __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i __vbaBoolVarNull _CIsin ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaStrCmp DllFunctionCall __vbaVarOr _adj_fpatan EVENT_SINK_Release _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode ord712 __vbaPrintFile ord606 _adj_fprem _adj_fdivr_m64 ord531 __vbaFPException __vbaStrVarVal __vbaVarCat __vbaI2Var ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList ord576 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaVarCopy __vbaVarLateMemCallLd ord617 _CIatan __vbaStrMove ord619 ord650 _allmul ord544 _CItan ord546 __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj ord580

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__8dd8f5d20365741da6cc0739dd6e63f6

msvbvm60

generic