jaffacakes118__48394609be94395ab7f687828892203b

General

Target
jaffacakes118__48394609be94395ab7f687828892203b
Size 520KB
Sample260920-qye4faca28
SHA256 01c47ec6f878527c2deba09f7b863cf9e6457815903c50ca3625474ac44ae41f
MD5 48394609be94395ab7f687828892203b
SHA1 d904a74a0a5d140f2aead644764f1598bcfa1a34
SHA512 3d69b88d6fd30b734f2c811192119ecfc61c22b18bab3090492b8321b9a3f26fc0dca760ca79c642b0056784d42c844ed532e9ac05187c767e3c31e151ee3dce
SSDEEP 12288:4nwpExwwOntYU2o2NDCm7RjnLPjWYnuXMjPhv:4nwpYwwOnsTDCmFjLP1nuXwP
TLSH
T143B4E5067124FA6AD989E4F83400D1AA1566383337709DD37FD67B8799302F3ACFA616
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__48394609be94395ab7f687828892203b

File Explorer

jaffacakes118__48394609be94395ab7f687828892203b

.exe 520KB

jaffacakes118__48394609be94395ab7f687828892203b

IMPHASH e9bc17ada2965af10fcd601bd6f421fb
SHA256 01c47ec6f878527c2deba09f7b863cf9e6457815903c50ca3625474ac44ae41f
MD5 48394609be94395ab7f687828892203b
SHA1 d904a74a0a5d140f2aead644764f1598bcfa1a34
SHA512 3d69b88d6fd30b734f2c811192119ecfc61c22b18bab3090492b8321b9a3f26fc0dca760ca79c642b0056784d42c844ed532e9ac05187c767e3c31e151ee3dce
SSDEEP 12288:4nwpExwwOntYU2o2NDCm7RjnLPjWYnuXMjPhv:4nwpYwwOnsTDCmFjLP1nuXwP
TLSH
T143B4E5067124FA6AD989E4F83400D1AA1566383337709DD37FD67B8799302F3ACFA616
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11124

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub ord583 __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd __vbaPut3 _adj_fdiv_m64 __vbaRaiseEvent ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 ord666 __vbaAryDestruct __vbaVarForInit __vbaExitProc __vbaOnError ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord598 __vbaBoolVarNull _CIsin __vbaErase ord632 __vbaVarZero __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaPutOwner3 __vbaI2I4 __vbaVarLikeVar DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaUI1ErrVar __vbaRecUniToAnsi EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaStr2Vec __vbaExceptHandler ord712 __vbaStrToUnicode ord713 _adj_fprem _adj_fdivr_m64 __vbaI2Str ord608 __vbaFPException __vbaInStrVar ord717 __vbaStrVarVal __vbaUbound __vbaVarCat __vbaLsetFixstrFree ord644 ord537 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaVar2Vec __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaI4Str ord575 __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaVarAdd __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaVarTstGe __vbaFpI4 __vbaVarCopy ord617 _CIatan __vbaStrMove ord619 __vbaR8IntI4 _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__48394609be94395ab7f687828892203b

msvbvm60

generic