jaffacakes118__28707e9416cbeee89a6759ed8ab73bbd

General

Target
jaffacakes118__28707e9416cbeee89a6759ed8ab73bbd
Size 52KB
Sample260920-1853qa1dne
SHA256 ec73672d231aef6920a1dde8bea5657612c143b54d5cc73f7c1aa8a31bfca0bb
MD5 28707e9416cbeee89a6759ed8ab73bbd
SHA1 425e9793353ae3b627c8dd7a205a9ba308c18af5
SHA512 ae6e61178b324427c71d08690acaa74764ef88e496a662585dfbf3be23b8f0b01ce8cd7cfa5df3a008fc250b11161c14be76ef1b68f97234e9413e54c2f22e24
SSDEEP 768:JJh+HPA8iBSrFJh6kYwOKSJ88IBiJENsV+SDelVkImRk2cWP1:JJh+HPA8HPYwO/JxIBMp7OvWP1
TLSH
T13633C723EA18A032F21A85F10C39D5A965237C351A619D07758AFF4E2D36A47B9F131F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__28707e9416cbeee89a6759ed8ab73bbd

File Explorer

jaffacakes118__28707e9416cbeee89a6759ed8ab73bbd

.exe 52KB

jaffacakes118__28707e9416cbeee89a6759ed8ab73bbd

IMPHASH 60d3b3509b6246414543d5b591050d43
SHA256 ec73672d231aef6920a1dde8bea5657612c143b54d5cc73f7c1aa8a31bfca0bb
MD5 28707e9416cbeee89a6759ed8ab73bbd
SHA1 425e9793353ae3b627c8dd7a205a9ba308c18af5
SHA512 ae6e61178b324427c71d08690acaa74764ef88e496a662585dfbf3be23b8f0b01ce8cd7cfa5df3a008fc250b11161c14be76ef1b68f97234e9413e54c2f22e24
SSDEEP 768:JJh+HPA8iBSrFJh6kYwOKSJ88IBiJENsV+SDelVkImRk2cWP1:JJh+HPA8HPYwO/JxIBMp7OvWP1
TLSH
T13633C723EA18A032F21A85F10C39D5A965237C351A619D07758AFF4E2D36A47B9F131F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6524

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarTstGt __vbaVarSub _CIcos _adj_fptan __vbaStrI4 __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList __vbaEnd _adj_fdiv_m64 EVENT_SINK_Invoke ord513 __vbaRaiseEvent __vbaNextEachVar __vbaFreeObjList ord517 _adj_fprem1 __vbaRecAnsiToUni ord518 ord519 __vbaVarCmpNe __vbaStrCat __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError ord662 __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar Zombie_GetTypeInfo __vbaAryDestruct __vbaLateMemSt __vbaExitProc __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord304 ord598 ord520 __vbaStrFixstr __vbaFPFix __vbaBoolVarNull _CIsin ord632 ord525 __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef __vbaVarAbs __vbaGenerateBoundsError __vbaGet3 ord529 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaI2I4 __vbaObjVar DllFunctionCall ord670 __vbaRedimPreserve __vbaLbound _adj_fpatan Zombie_GetTypeInfoCount __vbaStrR8 __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt ord310 __vbaVarAnd EVENT_SINK_QueryInterface __vbaExceptHandler ord312 ord711 __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord607 __vbaFailedFriend ord608 ord716 __vbaFPException ord717 __vbaInStrVar ord319 __vbaStrVarVal __vbaUbound __vbaDateVar ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaR8Str ord570 __vbaInStr __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var __vbaAryLock __vbaLateMemCall ord320 __vbaVarDup __vbaStrComp __vbaStrToAnsi ord321 __vbaFpI2 __vbaFpI4 ord616 __vbaVarLateMemCallLd __vbaRecDestructAnsi ord617 _CIatan __vbaCastObj __vbaAryCopy __vbaStrMove __vbaForEachVar ord650 _allmul _CItan ord546 __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__28707e9416cbeee89a6759ed8ab73bbd

msvbvm60

generic