jaffacakes118__2b62246ac90d9ed3c35b1cbe1fd91b29

General

Target
jaffacakes118__2b62246ac90d9ed3c35b1cbe1fd91b29
Size 116KB
Sample260920-xk95zsys4n
SHA256 41881feb8d6df0d796b173f0e48b26bacf09d927bf19526a6ce05ea592b45bdf
MD5 2b62246ac90d9ed3c35b1cbe1fd91b29
SHA1 b713cb9f42f7de61cdee1c122196b18b2f0b99b0
SHA512 fa996880f9bf61cc6b713314d3e532cb7d211d9c7f405e26d3453bf2fced97abadb9e5b66e3a31ae3337916c9379745ecedbc44ce371cfd984aa8ef7e7d91b21
SSDEEP 1536:AEiYb+FoD+YsntK105ejmdiMH/ddKPs5ejIvi8vq5oD+Zbn9CnYk3ZFtD3KctQ2y:GTJF8ctQI8Qx
TLSH
T1A9C3B323BE94A41AF4D788B11965A0766C267D3612C89E0F6286FF4A3535563FCF230F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2b62246ac90d9ed3c35b1cbe1fd91b29

File Explorer

jaffacakes118__2b62246ac90d9ed3c35b1cbe1fd91b29

.exe 116KB

jaffacakes118__2b62246ac90d9ed3c35b1cbe1fd91b29

IMPHASH 5a8e3ce0a474109dd8eb6c700fa184c6
SHA256 41881feb8d6df0d796b173f0e48b26bacf09d927bf19526a6ce05ea592b45bdf
MD5 2b62246ac90d9ed3c35b1cbe1fd91b29
SHA1 b713cb9f42f7de61cdee1c122196b18b2f0b99b0
SHA512 fa996880f9bf61cc6b713314d3e532cb7d211d9c7f405e26d3453bf2fced97abadb9e5b66e3a31ae3337916c9379745ecedbc44ce371cfd984aa8ef7e7d91b21
SSDEEP 1536:AEiYb+FoD+YsntK105ejmdiMH/ddKPs5ejIvi8vq5oD+Zbn9CnYk3ZFtD3KctQ2y:GTJF8ctQI8Qx
TLSH
T1A9C3B323BE94A41AF4D788B11965A0766C267D3612C89E0F6286FF4A3535563FCF230F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7480

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaVarTstGt _CIcos _adj_fptan __vbaVarMove ord587 __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLineInputStr __vbaLenBstr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 ord517 _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaVarCmpNe __vbaStrCat __vbaLsetFixstr __vbaSetSystemError ord662 __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct ord669 __vbaVarForInit ord593 __vbaExitProc ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaStrFixstr ord520 __vbaBoolVarNull _CIsin ord632 __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef __vbaVarAbs __vbaGenerateBoundsError ord528 __vbaStrCmp ord529 __vbaPutOwner3 __vbaVarTstEq __vbaAryConstruct2 __vbaObjVar __vbaI2I4 ord561 DllFunctionCall __vbaVarOr __vbaFpUI1 __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode __vbaPrintFile ord712 _adj_fprem _adj_fdivr_m64 ord607 ord608 ord716 ord531 __vbaFPException __vbaInStrVar ord717 __vbaGetOwner3 __vbaStrVarVal __vbaUbound __vbaGetOwner4 __vbaVarCat __vbaDateVar __vbaI2Var ord537 ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVarLateMemCallLdRf __vbaNew2 ord570 __vbaVar2Vec __vbaInStr ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var ord610 __vbaAryLock __vbaLateMemCall __vbaVarAdd __vbaVarDup __vbaStrToAnsi ord612 __vbaOnGoCheck ord616 __vbaFpI4 __vbaR8IntI2 __vbaLateMemCallLd ord617 _CIatan __vbaStrMove ord619 _allmul _CItan ord546 __vbaAryUnlock __vbaVarForNext _CIexp __vbaMidStmtBstr __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2b62246ac90d9ed3c35b1cbe1fd91b29

msvbvm60

generic