jaffacakes118__2a08ea827b058d036e71896f7ce5b895

General

Target
jaffacakes118__2a08ea827b058d036e71896f7ce5b895
Size 52KB
Sample260920-27ae4adh27
SHA256 22f17527f00fdc920a57039a2dcd4df2cd3709937a35a0a035bb1319d07ee921
MD5 2a08ea827b058d036e71896f7ce5b895
SHA1 c0fb9a4e008d8a8fff340ff60d4a97c8554be7ea
SHA512 cbd16dbc8748f2d81b40c5d51aa4b5686f2861a7c99e02891abe900f1920c35709522ee9a95ff08ac17a7101aaf2320cde5b11ef0d6a3339960d8de384774e26
SSDEEP 768:+cIVo9KnrAwqAD5mOGMhnNPTb5hR19lTZuH3:Hr9T4GyTR9TZu
TLSH
T15133A211B6CBD12FE1C146F52A6BD2D959187EB54B81E0AFB78AFB1C2A350D0D830B17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2a08ea827b058d036e71896f7ce5b895

File Explorer

jaffacakes118__2a08ea827b058d036e71896f7ce5b895

.dll 52KB

jaffacakes118__2a08ea827b058d036e71896f7ce5b895

IMPHASH 9768e77d30f54bc9fab1e26143398812
SHA256 22f17527f00fdc920a57039a2dcd4df2cd3709937a35a0a035bb1319d07ee921
MD5 2a08ea827b058d036e71896f7ce5b895
SHA1 c0fb9a4e008d8a8fff340ff60d4a97c8554be7ea
SHA512 cbd16dbc8748f2d81b40c5d51aa4b5686f2861a7c99e02891abe900f1920c35709522ee9a95ff08ac17a7101aaf2320cde5b11ef0d6a3339960d8de384774e26
SSDEEP 768:+cIVo9KnrAwqAD5mOGMhnNPTb5hR19lTZuH3:Hr9T4GyTR9TZu
TLSH
T15133A211B6CBD12FE1C146F52A6BD2D959187EB54B81E0AFB78AFB1C2A350D0D830B17
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6380

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub __vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaLineInputStr __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 EVENT_SINK_Invoke __vbaFreeObjList ord516 _adj_fprem1 ord518 ord519 __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj __vbaVargVarCopy __vbaLenVar _adj_fdiv_m32 __vbaAryVar Zombie_GetTypeInfo __vbaAryDestruct EVENT_SINK2_Release __vbaExitProc __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad __vbaBoolVar ord520 __vbaBoolVarNull __vbaVarTstLt _CIsin ord631 ord525 __vbaVargVarMove __vbaVarCmpGt __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaI2I4 DllFunctionCall __vbaVarOr __vbaVarLateMemSt _adj_fpatan __vbaFixstrConstruct Zombie_GetTypeInfoCount EVENT_SINK_Release __vbaUI1I2 _CIsqrt __vbaVarAnd __vbaObjIs EVENT_SINK_QueryInterface __vbaExceptHandler ord711 ord712 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException __vbaInStrVar ord319 __vbaUbound __vbaStrVarVal __vbaVarCat ord537 ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 __vbaInStr ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 EVENT_SINK2_AddRef __vbaFreeStrList __vbaVarCmpLt _adj_fdivr_m32 _adj_fdiv_r ord685 __vbaVarTstNe ord101 ord102 __vbaI4Var ord103 ord104 ord105 __vbaAryLock ord320 __vbaVarDup __vbaStrToAnsi ord321 ord616 __vbaVarLateMemCallLd ord617 __vbaLateMemCallLd _CIatan __vbaI2ErrVar __vbaStrMove __vbaAryCopy __vbaCastObj ord619 __vbaStrVarCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2a08ea827b058d036e71896f7ce5b895

msvbvm60

generic