jaffacakes118__2911a2d0849999cd6aa4bb2d90fe45ec

General

Target
jaffacakes118__2911a2d0849999cd6aa4bb2d90fe45ec
Size 1.2MB
Sample260920-2lnqlatzav
SHA256 1d28a6389bb2de22013f3db9fdd144fc606347fe165a550ca22429570deb4280
MD5 2911a2d0849999cd6aa4bb2d90fe45ec
SHA1 7d20b672c88fca3c2a53fef6848dddc068fba0e2
SHA512 f35c995d6e05408e488066a1606b9bc814b6cd5cec460b83ae7f7d0b71f102ad905db7ec44dc759ce690c438f4a0e65c025f3a312399e9bf7e5778a4478d824a
SSDEEP 12288:8btIEYQqLW7y3l+LUZclgdYxThUegN56fIM6SkYQqLWpbtIEUZclgdYxThUegN5i:8nYJLT3lokYJLYBREk8n4XYJL
TLSH
T1584583253A78522BD060D6B8CFE1B463A41BBC2F35D08C7191A6770A83B7F47259B63D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2911a2d0849999cd6aa4bb2d90fe45ec

File Explorer

jaffacakes118__2911a2d0849999cd6aa4bb2d90fe45ec

.exe 1.2MB

jaffacakes118__2911a2d0849999cd6aa4bb2d90fe45ec

IMPHASH cc588f6badf3f2fa7c2286db8705ec32
SHA256 1d28a6389bb2de22013f3db9fdd144fc606347fe165a550ca22429570deb4280
MD5 2911a2d0849999cd6aa4bb2d90fe45ec
SHA1 7d20b672c88fca3c2a53fef6848dddc068fba0e2
SHA512 f35c995d6e05408e488066a1606b9bc814b6cd5cec460b83ae7f7d0b71f102ad905db7ec44dc759ce690c438f4a0e65c025f3a312399e9bf7e5778a4478d824a
SSDEEP 12288:8btIEYQqLW7y3l+LUZclgdYxThUegN56fIM6SkYQqLWpbtIEUZclgdYxThUegN5i:8nYJLT3lokYJLYBREk8n4XYJL
TLSH
T1584583253A78522BD060D6B8CFE1B463A41BBC2F35D08C7191A6770A83B7F47259B63D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

ord690 __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaLineInputStr ord696 __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList _adj_fprem1 ord628 __vbaCopyBytes __vbaStrCat __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj ord665 _adj_fdiv_m32 __vbaAryDestruct ord593 ord300 ord594 __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord599 ord306 _CIsin __vbaErase __vbaVarZero __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaStrCmp __vbaAryConstruct2 DllFunctionCall __vbaLbound _adj_fpatan __vbaRedim __vbaUI1ErrVar EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler _adj_fprem _adj_fdivr_m64 __vbaFPException __vbaStrVarVal __vbaUbound ord644 ord645 _CIlog __vbaFileOpen __vbaNew2 ord648 ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 ord689 __vbaAryLock __vbaVarDup _CIatan __vbaAryCopy __vbaStrMove __vbaR8IntI4 _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr __vbaI4ErrVar

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2911a2d0849999cd6aa4bb2d90fe45ec

msvbvm60

generic