jaffacakes118__9e1731bac6fa855bf2641a084c9bffe8

General

Target
jaffacakes118__9e1731bac6fa855bf2641a084c9bffe8
Size 664KB
Sample260919-tljsmstycs
SHA256 c8a70073e5ff783201880cb0924329d6c1bd4064d988b63d6aff958d42b76e2d
MD5 9e1731bac6fa855bf2641a084c9bffe8
SHA1 1aede1e630c686c24f068ce822dce817a64c67ce
SHA512 c4ee2e659126a9ade2d8f552a03053c45fa3ca241902fef094d18e55faa607397abcc3c08b66c2652f64560306a41b9417af4b21d5be5c928cbe704260e00dd3
SSDEEP 12288:B7l/749KCjKCK7l/749KCjKCv6eKC3KCG/74U7bL:B9SfG9SfxLWJ3L
TLSH
T199E4F116BA69DCA3C3688A71DD65C1B8A725FE900B225B172016F77F7D319032FE2319
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__9e1731bac6fa855bf2641a084c9bffe8

File Explorer

jaffacakes118__9e1731bac6fa855bf2641a084c9bffe8

.exe 664KB

jaffacakes118__9e1731bac6fa855bf2641a084c9bffe8

IMPHASH 2a70b4c40cc23a4f394a43b40bd6f8ba
SHA256 c8a70073e5ff783201880cb0924329d6c1bd4064d988b63d6aff958d42b76e2d
MD5 9e1731bac6fa855bf2641a084c9bffe8
SHA1 1aede1e630c686c24f068ce822dce817a64c67ce
SHA512 c4ee2e659126a9ade2d8f552a03053c45fa3ca241902fef094d18e55faa607397abcc3c08b66c2652f64560306a41b9417af4b21d5be5c928cbe704260e00dd3
SSDEEP 12288:B7l/749KCjKCK7l/749KCjKCv6eKC3KCG/74U7bL:B9SfG9SfxLWJ3L
TLSH
T199E4F116BA69DCA3C3688A71DD65C1B8A725FE900B225B172016F77F7D319032FE2319
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaI2Sgn _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr ord588 __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 ord517 _adj_fprem1 __vbaRecAnsiToUni ord519 __vbaCopyBytes __vbaStrCat __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaVarForInit __vbaOnError ord595 __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaFpR4 __vbaStrFixstr __vbaVarTstLt _CIsin __vbaErase ord631 ord525 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaPutOwner3 __vbaI2I4 __vbaObjVar DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaLateIdCallLd __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaVarDiv ord716 __vbaFPException __vbaInStrVar __vbaStrVarVal __vbaUbound ord535 __vbaI2Var ord537 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec ord648 __vbaR8Str __vbaInStr __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarSetVar __vbaI4Var __vbaVarAdd __vbaLateMemCall __vbaStrToAnsi __vbaVarDup ord616 __vbaVarTstGe __vbaFpI4 __vbaRecDestructAnsi _CIatan ord618 __vbaCastObj __vbaStrMove __vbaStrVarCopy _allmul __vbaLateIdSt _CItan __vbaVarForNext _CIexp __vbaMidStmtBstr __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__9e1731bac6fa855bf2641a084c9bffe8

msvbvm60

generic