jaffacakes118__939222854abb9c0b14eeee00ce95e913

General

Target
jaffacakes118__939222854abb9c0b14eeee00ce95e913
Size 528KB
Sample260919-pv99qsvs2n
SHA256 06b363026d5e69716b2d658980f263caf688727b5f5bd39a904bed4203d58b7c
MD5 939222854abb9c0b14eeee00ce95e913
SHA1 dc40a1c6c65fcbce3ef62bda969be10cbbcfbfa4
SHA512 6d19101f7ce12621006cfb51512e0ddb0fd1dbe028f5381843e877e14554af863e0559a087916508c408beaa4407a900ce3546ea3a8ea3aa640826d0455a7eec
SSDEEP 12288:LUlPCv3N72VuKf4bO1uGFxJdsNpiRTcgwyvAXgtNhhykyk:LUxCPN72VTAOrxJ48A+4gtf
TLSH
T132B412735F4209C6F627C572594B99378D37BDBA08409A2F33D0FB5D2E307A24A6760A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__939222854abb9c0b14eeee00ce95e913

File Explorer

jaffacakes118__939222854abb9c0b14eeee00ce95e913

.exe 528KB

jaffacakes118__939222854abb9c0b14eeee00ce95e913

IMPHASH 76dfb245342893fdee148ba07abcbda7
SHA256 06b363026d5e69716b2d658980f263caf688727b5f5bd39a904bed4203d58b7c
MD5 939222854abb9c0b14eeee00ce95e913
SHA1 dc40a1c6c65fcbce3ef62bda969be10cbbcfbfa4
SHA512 6d19101f7ce12621006cfb51512e0ddb0fd1dbe028f5381843e877e14554af863e0559a087916508c408beaa4407a900ce3546ea3a8ea3aa640826d0455a7eec
SSDEEP 12288:LUlPCv3N72VuKf4bO1uGFxJdsNpiRTcgwyvAXgtNhhykyk:LUxCPN72VTAOrxJ48A+4gtf
TLSH
T132B412735F4209C6F627C572594B99378D37BDBA08409A2F33D0FB5D2E307A24A6760A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5060

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaStrI4 __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaPut3 __vbaFreeVarList _adj_fdiv_m64 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct ord593 ord594 __vbaOnError ord595 _adj_fdiv_m16i _adj_fdivr_m16i __vbaBoolVarNull _CIsin ord631 ord632 __vbaChkstk __vbaFileClose ord528 __vbaStrCmp __vbaPutOwner3 __vbaI2I4 DllFunctionCall _adj_fpatan __vbaFixstrConstruct __vbaRecUniToAnsi ord600 _CIsqrt __vbaVarAnd __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord607 ord608 __vbaFPException __vbaInStrVar __vbaVarCat ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr __vbaVar2Vec __vbaNew2 ord648 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq ord610 ord612 __vbaVarDup __vbaStrToAnsi __vbaFpI2 ord617 __vbaRecDestructAnsi _CIatan __vbaStrMove _allmul _CItan __vbaFPInt _CIexp ord580 __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__939222854abb9c0b14eeee00ce95e913

msvbvm60

generic