jaffacakes118__91d0376e2176dc6b200bbe7d5ec7474e

General

Target
jaffacakes118__91d0376e2176dc6b200bbe7d5ec7474e
Size 416KB
Sample260919-pawkvafb55
SHA256 d0b71fc97e138073a1236a4fb6219c4c7ce36875b3f0ca153497ae0645f51280
MD5 91d0376e2176dc6b200bbe7d5ec7474e
SHA1 f47c0737c1847be6678f93e975e96484dfb0e68f
SHA512 1568aa850106d0b356f25fd85bc2362f0efab2c1c97f5a72966bdd770a9ee4833bdb12f255dbf5197fd4f036a1617b7428d01fb71fc30f4992ce29a4372065f0
SSDEEP 6144:polWK3w6eD3h/iI1UUjT3pZNFzg9R+sweu2ubSrwzN8SfWr:pKeD3h/N1jpZNi9R+swevu2o8SC
TLSH
T13494DF23B3208647E494C9F0BC26D5509AA47D7806EAE187B3DD7E0867B67C3683B717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__91d0376e2176dc6b200bbe7d5ec7474e

File Explorer

jaffacakes118__91d0376e2176dc6b200bbe7d5ec7474e

.exe 416KB

jaffacakes118__91d0376e2176dc6b200bbe7d5ec7474e

IMPHASH 927199433f48dba635d71f4f0f437fdf
SHA256 d0b71fc97e138073a1236a4fb6219c4c7ce36875b3f0ca153497ae0645f51280
MD5 91d0376e2176dc6b200bbe7d5ec7474e
SHA1 f47c0737c1847be6678f93e975e96484dfb0e68f
SHA512 1568aa850106d0b356f25fd85bc2362f0efab2c1c97f5a72966bdd770a9ee4833bdb12f255dbf5197fd4f036a1617b7428d01fb71fc30f4992ce29a4372065f0
SSDEEP 6144:polWK3w6eD3h/iI1UUjT3pZNFzg9R+sweu2ubSrwzN8SfWr:pKeD3h/N1jpZNi9R+swevu2o8SC
TLSH
T13494DF23B3208647E494C9F0BC26D5509AA47D7806EAE187B3DD7E0867B67C3683B717
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLateIdCall __vbaLenBstr __vbaLineInputStr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaNextEachVar __vbaFreeObjList _adj_fprem1 __vbaRecAnsiToUni ord626 __vbaCopyBytes __vbaForEachCollAd __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord666 __vbaAryVar ord667 __vbaAryDestruct __vbaExitProc __vbaVarForInit ord595 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord598 __vbaStrFixstr __vbaBoolVarNull _CIsin ord709 ord631 ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaStrCmp ord529 __vbaPutOwner3 __vbaGet4 __vbaI2I4 __vbaObjVar DllFunctionCall __vbaVarLateMemSt __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaLateIdCallLd __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord600 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler ord711 __vbaStrToUnicode __vbaPrintFile _adj_fprem _adj_fdivr_m64 __vbaVarDiv ord608 ord531 ord716 __vbaFPException __vbaInStrVar ord717 __vbaUbound __vbaStrVarVal __vbaGetOwner3 __vbaVarCat __vbaI2Var ord537 ord644 __vbaFileSeek ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord570 __vbaVar2Vec __vbaInStr ord648 ord571 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy ord681 __vbaVarNot __vbaFreeStrList ord576 _adj_fdivr_m32 _adj_fdiv_r ord578 ord100 ord579 __vbaVarSetVar __vbaI4Var __vbaVarCmpEq __vbaLateMemCall __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaFpI2 __vbaFpI4 __vbaVarLateMemCallLd ord617 __vbaLateMemCallLd __vbaVarSetObjAddref _CIatan __vbaStrMove ord618 __vbaAryCopy __vbaForEachVar _allmul __vbaLateIdSt __vbaLenVarB _CItan __vbaNextEachCollAd __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__91d0376e2176dc6b200bbe7d5ec7474e

msvbvm60

generic