jaffacakes118__9e98e3531c0fa709f80a3c02645d6768

General

Target
jaffacakes118__9e98e3531c0fa709f80a3c02645d6768
Size 472KB
Sample260919-tr655atzbx
SHA256 57aa4c383934bfc511f8ea342d82ed207ded8b28884b6cf99029cbb0415c4368
MD5 9e98e3531c0fa709f80a3c02645d6768
SHA1 6e88de4fc80e27046cf00d44b5e1b7b909c09b2e
SHA512 ddb4d2b6ff54713a3306c45ef3158aed6546358e266d8b62f8e0a20b0a772d4bbdd8196e2ab926bc90913845f60df9cde9a815894e9d47c0ca649ae76cfc8a40
SSDEEP 12288:covKyvfqzI5e7HZN8id2iA5Es4VySYFYeQretSIs:5vKyvfq85A+MUdqeXXs
TLSH
T1D5A48C5BB381E376E44684B1A70542E010EDAD3A99803507F7C1BF297BF15E3DA22B97
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__9e98e3531c0fa709f80a3c02645d6768

File Explorer

jaffacakes118__9e98e3531c0fa709f80a3c02645d6768

.exe 472KB

jaffacakes118__9e98e3531c0fa709f80a3c02645d6768

IMPHASH 9d35583a0783e143d9ef476659a1b520
SHA256 57aa4c383934bfc511f8ea342d82ed207ded8b28884b6cf99029cbb0415c4368
MD5 9e98e3531c0fa709f80a3c02645d6768
SHA1 6e88de4fc80e27046cf00d44b5e1b7b909c09b2e
SHA512 ddb4d2b6ff54713a3306c45ef3158aed6546358e266d8b62f8e0a20b0a772d4bbdd8196e2ab926bc90913845f60df9cde9a815894e9d47c0ca649ae76cfc8a40
SSDEEP 12288:covKyvfqzI5e7HZN8id2iA5Es4VySYFYeQretSIs:5vKyvfq85A+MUdqeXXs
TLSH
T1D5A48C5BB381E376E44684B1A70542E010EDAD3A99803507F7C1BF297BF15E3DA22B97
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8384

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA

msvbvm60

__vbaVarSub __vbaVarTstGt _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd __vbaPut3 _adj_fdiv_m64 __vbaNextEachVar __vbaRaiseEvent __vbaFreeObjList __vbaVarIndexLoadRef _adj_fprem1 __vbaRecAnsiToUni ord518 ord626 __vbaForEachCollAd __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord666 ord667 __vbaAryDestruct ord669 __vbaVarForInit __vbaObjSet __vbaStrLike __vbaOnError ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaFpR4 ord520 __vbaStrFixstr __vbaBoolVarNull _CIsin __vbaErase ord631 ord709 __vbaVarZero ord525 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef ord527 ord528 __vbaGenerateBoundsError ord529 __vbaGet3 __vbaStrCmp __vbaPutOwner3 __vbaVarTstEq __vbaAryConstruct2 __vbaCyI4 __vbaObjVar __vbaI2I4 DllFunctionCall __vbaVarOr __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord600 __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler ord711 __vbaPrintFile __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 __vbaI2Str ord608 ord716 __vbaFPException __vbaInStrVar ord717 __vbaGetOwner3 __vbaStrVarVal __vbaUbound __vbaVarCat ord535 __vbaLsetFixstrFree __vbaI2Var ord644 ord537 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 ord570 __vbaR8Str __vbaNew2 __vbaVar2Vec __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList __vbaDerefAry1 ord576 _adj_fdivr_m32 _adj_fdiv_r ord685 ord578 ord100 ord579 __vbaVarSetVar __vbaI4Var __vbaVarCmpEq __vbaLateMemCall __vbaAryLock __vbaVarAdd __vbaVarDup __vbaStrToAnsi __vbaVarMod __vbaVarLateMemCallLd __vbaFpI4 __vbaVarCopy ord616 __vbaLateMemCallLd ord617 _CIatan __vbaUI1Str __vbaStrMove __vbaForEachVar __vbaR8IntI4 _allmul _CItan __vbaNextEachCollAd __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__9e98e3531c0fa709f80a3c02645d6768

kernel32

msvbvm60

generic