jaffacakes118__26e659779573b2bd825fc544c74e08d0

General

Target
jaffacakes118__26e659779573b2bd825fc544c74e08d0
Size 72KB
Sample260920-1cc23azz2p
SHA256 9eb1b974d8a13291cdeb20416ce5ec4d2f601c3251a72f55e4d866fab08ebee9
MD5 26e659779573b2bd825fc544c74e08d0
SHA1 fd9a8541b9ff171875793ee6c9ede202f7271a9e
SHA512 fe7e20142567ac0cc6ebb907c1f89c8512337b65a2aef232b63592e32817d7f6ca89856c1ef0d39f408e097244bbe1c0daea0d0a58d98a9ca6f506e198ab1318
SSDEEP 1536:Xi6HuRhV2K6VuPiCCGtiWepHf0PJn6A5UYxc+Pc+s53J:Xi6OHPiCBtiWepHf0PW6m3
TLSH
T13E73C613F601D02AF0A586F06C34919A28797E312590EE0BF7857F5E34B61E7A8F4B5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__26e659779573b2bd825fc544c74e08d0

File Explorer

jaffacakes118__26e659779573b2bd825fc544c74e08d0

.exe 72KB

jaffacakes118__26e659779573b2bd825fc544c74e08d0

IMPHASH c35dd41f6d02f4b9c61aadae8ba21683
SHA256 9eb1b974d8a13291cdeb20416ce5ec4d2f601c3251a72f55e4d866fab08ebee9
MD5 26e659779573b2bd825fc544c74e08d0
SHA1 fd9a8541b9ff171875793ee6c9ede202f7271a9e
SHA512 fe7e20142567ac0cc6ebb907c1f89c8512337b65a2aef232b63592e32817d7f6ca89856c1ef0d39f408e097244bbe1c0daea0d0a58d98a9ca6f506e198ab1318
SSDEEP 1536:Xi6HuRhV2K6VuPiCCGtiWepHf0PJn6A5UYxc+Pc+s53J:Xi6OHPiCBtiWepHf0PW6m3
TLSH
T13E73C613F601D02AF0A586F06C34919A28797E312590EE0BF7857F5E34B61E7A8F4B5B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaFreeVar __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 EVENT_SINK_Invoke __vbaFreeObjList ord517 _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord666 Zombie_GetTypeInfo __vbaForEachCollObj __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord599 _CIsin ord631 __vbaNextEachCollObj __vbaChkstk EVENT_SINK_AddRef __vbaStrCmp ord529 __vbaObjVar DllFunctionCall _adj_fpatan Zombie_GetTypeInfoCount EVENT_SINK_Release __vbaNew ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaI2Str ord716 __vbaFPException ord319 __vbaStrVarVal __vbaVarCat _CIlog __vbaErrorOverflow __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList ord576 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaLateMemCall ord320 __vbaVarDup ord612 __vbaStrToAnsi ord321 __vbaFpI4 __vbaLateMemCallLd _CIatan __vbaStrMove __vbaStrVarCopy _allmul _CItan _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__26e659779573b2bd825fc544c74e08d0

msvbvm60

generic