jaffacakes118__93fd63e0daa703d5e107f4a2b7651fdf

General

Target
jaffacakes118__93fd63e0daa703d5e107f4a2b7651fdf
Size 133KB
Sample260919-p172kafe65
SHA256 8449141f740f4b8c8ca153b2d0faba03a4191e80bfe5a2c3dbe94b33f2238d24
MD5 93fd63e0daa703d5e107f4a2b7651fdf
SHA1 27821f77db00a42b54cde69eb5b7470c5673d3b9
SHA512 6f8c78115f7c82d476bc092bb4499d185824d403013bdb5ffc10cef94742f01fe1b7fc52ac36f9f8b9a0b56786dbcad7eede800226221a5e1458b5bfc2767510
SSDEEP 1536:ATu5FbNTcnaLauog51jHuHfhj01zzPEeE6OU3zzxGQzksIAkRhinziYgLsoFm0:ASDp1o+M2zceE6OU3ZG2ksORUiYgY
TLSH
T1A5D38639A784813AF09195713D3EC2AE34AC3D3154A0D65ABAC23F1978711A2FDB178F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__93fd63e0daa703d5e107f4a2b7651fdf

File Explorer

jaffacakes118__93fd63e0daa703d5e107f4a2b7651fdf

.exe 133KB

jaffacakes118__93fd63e0daa703d5e107f4a2b7651fdf

IMPHASH 3c45c40857c669528d0cad3f9428c5b4
SHA256 8449141f740f4b8c8ca153b2d0faba03a4191e80bfe5a2c3dbe94b33f2238d24
MD5 93fd63e0daa703d5e107f4a2b7651fdf
SHA1 27821f77db00a42b54cde69eb5b7470c5673d3b9
SHA512 6f8c78115f7c82d476bc092bb4499d185824d403013bdb5ffc10cef94742f01fe1b7fc52ac36f9f8b9a0b56786dbcad7eede800226221a5e1458b5bfc2767510
SSDEEP 1536:ATu5FbNTcnaLauog51jHuHfhj01zzPEeE6OU3zzxGQzksIAkRhinziYgLsoFm0:ASDp1o+M2zceE6OU3ZG2ksORUiYgY
TLSH
T1A5D38639A784813AF09195713D3EC2AE34AC3D3154A0D65ABAC23F1978711A2FDB178F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaVarIndexStore __vbaNextEachVar __vbaStrErrVarCopy _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaVarCmpNe __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryDestruct __vbaVarIndexLoadRefLock __vbaVarForInit __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad __vbaStrFixstr __vbaBoolVar __vbaRefVarAry __vbaBoolVarNull __vbaVargVar __vbaVarTstLt _CIsin __vbaErase __vbaVarZero __vbaVarCmpGt __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaObjVar DllFunctionCall __vbaVarOr _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaFPException __vbaInStrVar __vbaUbound __vbaStrVarVal __vbaVarCat _CIlog __vbaErrorOverflow __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r __vbaVarTstNe __vbaVarSetVar __vbaI4Var __vbaVarCmpEq __vbaAryLock __vbaLateMemCall __vbaVarAdd __vbaVarDup __vbaStrToAnsi __vbaFpI4 __vbaVarCopy __vbaVarLateMemCallLd __vbaVarSetObjAddref __vbaLateMemCallLd _CIatan __vbaStrMove __vbaForEachVar __vbaStrVarCopy _allmul _CItan __vbaAryUnlock __vbaFPInt __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__93fd63e0daa703d5e107f4a2b7651fdf

msvbvm60

generic