jaffacakes118__285052742f26bfb5f7355e536e5d8c19

General

Target
jaffacakes118__285052742f26bfb5f7355e536e5d8c19
Size 146KB
Sample260920-16d68add66
SHA256 5f2314fe26cfdc9292ab303bc7d5c749cbd60653546fa5025a403642e6b22c02
MD5 285052742f26bfb5f7355e536e5d8c19
SHA1 9a48d5a77fb0d0d154f81c5bb6b1a857618deadb
SHA512 2ff8428746e0bee40a8bb44a7e75b1509146909366831c9009ec83169fc2a05d715da31aabaf4bbce6b8e4e7a7c2570c49bc425bbc81fccf2a7a701b702254b4
SSDEEP 3072:HHIUHK6dQUkMASMwUmV0SNJNoDkOkCw+qpL/U3nt+2GnuPJnRR8xqkm7oBvpH2lm:HHi6d9k9SNUmV0SNJNoDkOkCw+wPXuPc
TLSH
T1C5E39422F694D10AF052C5B57A28D6AA3C657E320581AC57F3803F9E3575AE3B4F0B1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__285052742f26bfb5f7355e536e5d8c19

File Explorer

jaffacakes118__285052742f26bfb5f7355e536e5d8c19

.exe 146KB

jaffacakes118__285052742f26bfb5f7355e536e5d8c19

IMPHASH d585da087fba00219fa8ec278a139c74
SHA256 5f2314fe26cfdc9292ab303bc7d5c749cbd60653546fa5025a403642e6b22c02
MD5 285052742f26bfb5f7355e536e5d8c19
SHA1 9a48d5a77fb0d0d154f81c5bb6b1a857618deadb
SHA512 2ff8428746e0bee40a8bb44a7e75b1509146909366831c9009ec83169fc2a05d715da31aabaf4bbce6b8e4e7a7c2570c49bc425bbc81fccf2a7a701b702254b4
SSDEEP 3072:HHIUHK6dQUkMASMwUmV0SNJNoDkOkCw+qpL/U3nt+2GnuPJnRR8xqkm7oBvpH2lm:HHi6d9k9SNUmV0SNJNoDkOkCw+wPXuPc
TLSH
T1C5E39422F694D10AF052C5B57A28D6AA3C657E320581AC57F3803F9E3575AE3B4F0B1B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9668

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaLineInputStr __vbaLenBstr __vbaFreeVarList __vbaPut3 _adj_fdiv_m64 __vbaNextEachVar __vbaFreeObjList __vbaLineInputVar ord516 _adj_fprem1 ord626 __vbaCopyBytes __vbaStrCat __vbaVarCmpNe __vbaLsetFixstr __vbaBoolErrVar __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit __vbaExitProc __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord520 __vbaForEachCollVar __vbaBoolVarNull _CIsin __vbaVarCmpGt __vbaVarZero ord525 ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef ord528 __vbaGenerateBoundsError __vbaStrCmp ord529 __vbaVarTstEq __vbaObjVar __vbaNextEachCollVar __vbaI2I4 DllFunctionCall __vbaVarOr __vbaLbound _adj_fpatan __vbaFixstrConstruct EVENT_SINK_Release ord600 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaExceptHandler ord711 ord712 __vbaStrToUnicode __vbaPrintFile _adj_fprem _adj_fdivr_m64 ord607 __vbaVarDiv ord608 ord716 ord531 __vbaFPException __vbaInStrVar __vbaStrVarVal __vbaUbound __vbaVarCat __vbaI2Var ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord648 __vbaInStr __vbaVarLateMemCallLdRf __vbaVarInt ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaVarCmpLt __vbaVarNot ord576 _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe ord579 __vbaVarSetVar __vbaI4Var __vbaVarCmpEq __vbaVarAdd __vbaAryLock __vbaLateMemCall __vbaStrToAnsi __vbaVarDup ord613 __vbaVarMod __vbaVarCopy __vbaVarLateMemCallLd ord616 __vbaLateMemCallLd __vbaVarSetObjAddref ord617 _CIatan __vbaStrMove __vbaAryCopy __vbaStrVarCopy __vbaForEachVar ord619 ord542 _allmul _CItan ord546 __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr ord580

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__285052742f26bfb5f7355e536e5d8c19

msvbvm60

generic