jaffacakes118__2867774e0796a6b9e62965b2f2ac1c0b

General

Target
jaffacakes118__2867774e0796a6b9e62965b2f2ac1c0b
Size 72KB
Sample260920-18ln3ser5w
SHA256 e9682ed8386bb472dc56f07de1c9ce51c9da55dcc3a26b1010c84b178651c7cd
MD5 2867774e0796a6b9e62965b2f2ac1c0b
SHA1 88aadb8b58073e52f0808a0c62e8b51018c0968b
SHA512 4b0168199daadc94dea80ba92d96322e22ed7e4523b39c03dee62abc2367bc895c08fd59bf0867226079ad2b6e23dda1389e1518f8e9c98c359fe01e5248f67d
SSDEEP 1536:KoQbDacYSBmNBClfwKfPFtIgsgSuBKKlHQ:EDac3BmzClfwODbsgJl
TLSH
T14A73F717A7E4F632E608C8F20B1A8BB48889B93019D15D03F7546A2F7B71997DA31737
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2867774e0796a6b9e62965b2f2ac1c0b

File Explorer

jaffacakes118__2867774e0796a6b9e62965b2f2ac1c0b

.exe 72KB

jaffacakes118__2867774e0796a6b9e62965b2f2ac1c0b

IMPHASH fa2240eaebdef80a3fed92ae4dfd514e
SHA256 e9682ed8386bb472dc56f07de1c9ce51c9da55dcc3a26b1010c84b178651c7cd
MD5 2867774e0796a6b9e62965b2f2ac1c0b
SHA1 88aadb8b58073e52f0808a0c62e8b51018c0968b
SHA512 4b0168199daadc94dea80ba92d96322e22ed7e4523b39c03dee62abc2367bc895c08fd59bf0867226079ad2b6e23dda1389e1518f8e9c98c359fe01e5248f67d
SSDEEP 1536:KoQbDacYSBmNBClfwKfPFtIgsgSuBKKlHQ:EDac3BmzClfwODbsgJl
TLSH
T14A73F717A7E4F632E608C8F20B1A8BB48889B93019D15D03F7546A2F7B71997DA31737
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5768

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaR8FixI4 __vbaNextEachAry _CIcos _adj_fptan __vbaVarMove __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaGosubReturn __vbaStrVarMove __vbaPut3 __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent ord516 _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaExitProc ord593 ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i _CIsin __vbaErase ord631 __vbaVarZero __vbaChkstk __vbaFileClose __vbaGosubFree EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp ord529 __vbaPutOwner3 __vbaAryConstruct2 __vbaI2I4 DllFunctionCall __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaStr2Vec __vbaUI1I4 __vbaExceptHandler ord712 ord606 _adj_fprem _adj_fdivr_m64 __vbaGosub ord608 __vbaFPException ord717 __vbaUbound __vbaGetOwner3 __vbaStrVarVal __vbaVarCat ord537 ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr ord648 ord570 __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord578 ord685 ord100 __vbaForEachAry __vbaAryLock __vbaVarDup __vbaAryVarVarg ord616 __vbaFpI4 _CIatan __vbaStrMove __vbaAryCopy __vbaUI1Str __vbaStrVarCopy __vbaR8IntI4 _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr __vbaI4ErrVar

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2867774e0796a6b9e62965b2f2ac1c0b

msvbvm60

generic