jaffacakes118__289e6622cea6ce79f5fd06aa37bd991b

General

Target
jaffacakes118__289e6622cea6ce79f5fd06aa37bd991b
Size 96KB
Sample260920-2cgwpade34
SHA256 02213697fab189a9ca578ce98ba62e6103ea4b537ba45f84e54d60517dc36c85
MD5 289e6622cea6ce79f5fd06aa37bd991b
SHA1 d55621ee51614264728bbcfc67af2288e3f60245
SHA512 89cd59d4f72c001b2f9a7d83dfd74d338ae15caa1eb2778c044a2ba2ed4028be965e2d6af5b12ce9a4e9ead7a164ef017b5c126c9c21b732e1e4a73372a8bbb6
SSDEEP 1536:MptOwbsWENe/ogRS4l28oGdZuPA6tF4kE+a9GeD2:qtOwbszevRS4lvoGTtw4Yz
TLSH
T1F5A31813A7E4D832C2554AF58EB586A8443BFC3164A18E0BB5C83F1F6B77E46A913317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__289e6622cea6ce79f5fd06aa37bd991b

File Explorer

jaffacakes118__289e6622cea6ce79f5fd06aa37bd991b

.exe 96KB

jaffacakes118__289e6622cea6ce79f5fd06aa37bd991b

IMPHASH a0032e15c02b151aa0cf67a433ec1d72
SHA256 02213697fab189a9ca578ce98ba62e6103ea4b537ba45f84e54d60517dc36c85
MD5 289e6622cea6ce79f5fd06aa37bd991b
SHA1 d55621ee51614264728bbcfc67af2288e3f60245
SHA512 89cd59d4f72c001b2f9a7d83dfd74d338ae15caa1eb2778c044a2ba2ed4028be965e2d6af5b12ce9a4e9ead7a164ef017b5c126c9c21b732e1e4a73372a8bbb6
SSDEEP 1536:MptOwbsWENe/ogRS4l28oGdZuPA6tF4kE+a9GeD2:qtOwbszevRS4lvoGTtw4Yz
TLSH
T1F5A31813A7E4D832C2554AF58EB586A8443BFC3164A18E0BB5C83F1F6B77E46A913317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

78673

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 ord690 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLineInputStr __vbaGosubReturn __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct ord593 __vbaExitProc ord594 ord595 __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i _CIsin ord631 __vbaErase ord525 __vbaVarZero __vbaChkstk __vbaGosubFree ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaStrCmp __vbaGet3 __vbaPutOwner3 __vbaAryConstruct2 DllFunctionCall ord670 _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 __vbaFPException ord717 __vbaGetOwner3 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaLsetFixstrFree ord644 ord645 _CIlog __vbaFileOpen ord648 __vbaNew2 ord570 __vbaR8Str __vbaVar2Vec ord571 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaI4Str __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord578 ord685 ord100 __vbaVarTstNe ord689 __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI4 ord616 _CIatan ord618 __vbaUI1Str __vbaStrMove __vbaAryCopy __vbaR8IntI4 __vbaStrVarCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__289e6622cea6ce79f5fd06aa37bd991b

msvbvm60

generic