jaffacakes118__28abdc322e81c0e44e180d9fc8a88c0d

General

Target
jaffacakes118__28abdc322e81c0e44e180d9fc8a88c0d
Size 228KB
Sample260920-2desqade42
SHA256 bf946ad4e047c9a0c86d78fa0cc5ff09addbb3cbce28e41c9530adcd8b17852f
MD5 28abdc322e81c0e44e180d9fc8a88c0d
SHA1 ab53eae8788a1b409a83ae647cb9ab20e389c6e4
SHA512 13cb2436324557d35f3cd7aa6d4baaebf98adb3ff05ed249f54e44ad79e0c58045fddcdd5f6ccf37c103c9f456f4bd00eec0a78e02432486a2a8b426cf0f03b0
SSDEEP 6144:U3wg2R2YKRlAlpiY8OO09TaER2YKRlAlpiY8OO09TNcM:h2405CT52405CT
TLSH
T1DD34AE132B64D0E6E8AA09B1251F46B73C706C172B75DE6B6011FF692D34613B8F37A2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__28abdc322e81c0e44e180d9fc8a88c0d

File Explorer

jaffacakes118__28abdc322e81c0e44e180d9fc8a88c0d

.exe 228KB

jaffacakes118__28abdc322e81c0e44e180d9fc8a88c0d

IMPHASH f32aac001ce6c92bea7829573f64a4b6
SHA256 bf946ad4e047c9a0c86d78fa0cc5ff09addbb3cbce28e41c9530adcd8b17852f
MD5 28abdc322e81c0e44e180d9fc8a88c0d
SHA1 ab53eae8788a1b409a83ae647cb9ab20e389c6e4
SHA512 13cb2436324557d35f3cd7aa6d4baaebf98adb3ff05ed249f54e44ad79e0c58045fddcdd5f6ccf37c103c9f456f4bd00eec0a78e02432486a2a8b426cf0f03b0
SSDEEP 6144:U3wg2R2YKRlAlpiY8OO09TaER2YKRlAlpiY8OO09TNcM:h2405CT52405CT
TLSH
T1DD34AE132B64D0E6E8AA09B1251F46B73C706C172B75DE6B6011FF692D34613B8F37A2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5420

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaLineInputVar __vbaFreeObjList _adj_fprem1 __vbaRecAnsiToUni ord519 __vbaStrCat __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc __vbaFileCloseAll __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaStrFixstr __vbaBoolVarNull _CIsin __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaI2I4 DllFunctionCall _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode __vbaPrintFile ord606 _adj_fprem _adj_fdivr_m64 ord607 __vbaFPException ord717 __vbaStrVarVal __vbaVarCat __vbaLsetFixstrFree ord537 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr __vbaNew2 ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe ord610 __vbaAryLock __vbaVarAdd ord612 __vbaStrToAnsi ord616 __vbaVarCopy __vbaRecDestructAnsi _CIatan __vbaStrMove ord619 _allmul _CItan ord546 __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__28abdc322e81c0e44e180d9fc8a88c0d

msvbvm60

generic