jaffacakes118__ac4d9063eff72fa2e4cb4c68ab87943f

General

Target
jaffacakes118__ac4d9063eff72fa2e4cb4c68ab87943f
Size 213KB
Sample260919-x2afpabb69
SHA256 ba14c1c4ce63a836a019f996827ce2793e750f487da43b470dfb9e6da7554cf7
MD5 ac4d9063eff72fa2e4cb4c68ab87943f
SHA1 30df426bb745485ce113e06fde0f3e116b284772
SHA512 988721b23fa18362d207e0f481ea5e0e2391b2998673a42c1b599f06d390b7fbc9024fc731b8493392777bf5f865f0fc01a2f116059c84383eca4944fbed237f
SSDEEP 3072:tmybugyigl65r04bjcU0uildJFDmPhat52oAuAfWeqtJwazFbo+et6p:tmybVA6aECtoujeqtha6
TLSH
T18924E51BA718F02EE203C5F05875927A99157D350281ED6BB3C09F0A34B6593BDBA72F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__ac4d9063eff72fa2e4cb4c68ab87943f

File Explorer

jaffacakes118__ac4d9063eff72fa2e4cb4c68ab87943f

.exe 213KB

jaffacakes118__ac4d9063eff72fa2e4cb4c68ab87943f

IMPHASH e5a9c900e0ef49f5c7f2ff3bfb8e400e
SHA256 ba14c1c4ce63a836a019f996827ce2793e750f487da43b470dfb9e6da7554cf7
MD5 ac4d9063eff72fa2e4cb4c68ab87943f
SHA1 30df426bb745485ce113e06fde0f3e116b284772
SHA512 988721b23fa18362d207e0f481ea5e0e2391b2998673a42c1b599f06d390b7fbc9024fc731b8493392777bf5f865f0fc01a2f116059c84383eca4944fbed237f
SSDEEP 3072:tmybugyigl65r04bjcU0uildJFDmPhat52oAuAfWeqtJwazFbo+et6p:tmybVA6aECtoujeqtha6
TLSH
T18924E51BA718F02EE203C5F05875927A99157D350281ED6BB3C09F0A34B6593BDBA72F
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject SetEvent

advapi32

SetServiceStatus RegisterServiceCtrlHandlerW StartServiceCtrlDispatcherW

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub __vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 EVENT_SINK_Invoke __vbaVarIndexStore __vbaRaiseEvent __vbaFreeObjList ord517 __vbaStrErrVarCopy _adj_fprem1 __vbaRecAnsiToUni ord626 ord519 __vbaCopyBytes __vbaResume __vbaForEachCollAd __vbaStrCat ord552 ord553 __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaLenBstrB ord662 __vbaHresultCheckObj ord556 ord558 __vbaLenVar __vbaVargVarCopy _adj_fdiv_m32 __vbaAryVar ord667 Zombie_GetTypeInfo __vbaAryDestruct __vbaLateMemSt __vbaVarIndexLoadRefLock __vbaExitProc __vbaCyAdd __vbaOnError __vbaObjSet ord302 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaVarIndexLoad ord305 __vbaForEachCollVar __vbaStrFixstr ord521 ord308 __vbaBoolVarNull __vbaFpR8 __vbaRefVarAry _CIsin ord631 ord709 __vbaErase ord525 __vbaVargVarMove __vbaVarZero __vbaChkstk __vbaCyVar EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError __vbaExitEachColl __vbaCyI2 __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaCyI4 __vbaObjVar __vbaI2I4 __vbaNextEachCollVar ord561 DllFunctionCall ord563 __vbaCySub __vbaRedimPreserve __vbaLbound _adj_fpatan Zombie_GetTypeInfoCount __vbaRedim __vbaStrR8 __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt __vbaRedimVar __vbaObjIs ord311 EVENT_SINK_QueryInterface __vbaFpCmpCy __vbaVarMul __vbaExceptHandler ord711 ord313 ord712 __vbaStrToUnicode ord606 __vbaDateStr _adj_fprem _adj_fdivr_m64 ord607 __vbaFailedFriend ord716 __vbaFPException __vbaStrCompVar ord717 ord319 ord533 __vbaStrVarVal __vbaUbound __vbaVarCat __vbaDateVar ord536 __vbaI2Var ord537 ord644 ord538 _CIlog ord539 ord646 __vbaErrorOverflow __vbaVarLateMemCallLdRf __vbaVar2Vec __vbaNew2 __vbaInStr __vbaR8Str _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaI4Str __vbaVarNot __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaFpCy __vbaLateMemCall __vbaVarAdd __vbaAryLock ord320 __vbaStrToAnsi __vbaVarDup __vbaStrComp ord321 __vbaVarLateMemCallLd __vbaVarTstGe __vbaVarCopy ord616 __vbaFpI4 __vbaLateMemCallLd __vbaRecDestructAnsi _CIatan __vbaStrMove __vbaCastObj ord618 __vbaAryCopy __vbaI4Cy __vbaStrVarCopy ord542 ord543 ord650 _allmul ord544 ord651 ord545 _CItan __vbaNextEachCollAd ord546 ord547 __vbaAryUnlock _CIexp __vbaStrCy __vbaI4ErrVar __vbaRecAssign __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__ac4d9063eff72fa2e4cb4c68ab87943f

kernel32

advapi32

msvbvm60

generic