jaffacakes118__2b9201f384c38d6fab710c68cc47ef71

General

Target
jaffacakes118__2b9201f384c38d6fab710c68cc47ef71
Size 252KB
Sample260920-xpxepazycv
SHA256 93a0d47e834694cf8c645daccb23232b44613f54bed985711d49529a61f7c9d6
MD5 2b9201f384c38d6fab710c68cc47ef71
SHA1 45611a56459f1199ed8745d0fd616addb5ccc5e6
SHA512 02d120a78c346f6786fa983d8be30fdfd7202114c09813e688ceca0fae986268b499c3d0b962669a891c817d155872078b690e07a7f107099ba2d9336c724a5a
SSDEEP 3072:QES80wRfrUuFa3iw+SQqTw79ae1TdMPfoxMkdPtcyXDKv31Y:QQR7Bzq8h11qhGBXDKvF
TLSH
T179440F25E620A03AF88AC4F6746DE35A600C2D791694EC17F7895B85B0F42E7F5F1A0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2b9201f384c38d6fab710c68cc47ef71

File Explorer

jaffacakes118__2b9201f384c38d6fab710c68cc47ef71

.exe 252KB

jaffacakes118__2b9201f384c38d6fab710c68cc47ef71

IMPHASH e1b0d9d78721658849aec1db7c765360
SHA256 93a0d47e834694cf8c645daccb23232b44613f54bed985711d49529a61f7c9d6
MD5 2b9201f384c38d6fab710c68cc47ef71
SHA1 45611a56459f1199ed8745d0fd616addb5ccc5e6
SHA512 02d120a78c346f6786fa983d8be30fdfd7202114c09813e688ceca0fae986268b499c3d0b962669a891c817d155872078b690e07a7f107099ba2d9336c724a5a
SSDEEP 3072:QES80wRfrUuFa3iw+SQqTw79ae1TdMPfoxMkdPtcyXDKv31Y:QQR7Bzq8h11qhGBXDKvF
TLSH
T179440F25E620A03AF88AC4F6746DE35A600C2D791694EC17F7895B85B0F42E7F5F1A0F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16076

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 ord693 __vbaVarVargNofree ord187 __vbaFreeVar ord694 __vbaAryMove __vbaLenBstr __vbaStrVarMove ord695 ord696 __vbaFreeVarList __vbaEnd __vbaPut3 _adj_fdiv_m64 __vbaPut4 ord512 ord513 ord514 ord515 ord516 ord517 _adj_fprem1 ord518 ord519 ord628 ord629 __vbaStrCat __vbaInStrVarB __vbaLsetFixstr __vbaRecDestruct __vbaHresultCheckObj __vbaLenBstrB __vbaLenVar _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct ord669 __vbaVarIndexLoadRefLock __vbaOnError __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i __vbaVarIndexLoad ord520 __vbaStrFixstr ord521 ord522 ord523 __vbaBoolVarNull __vbaFpR8 _CIsin __vbaErase ord631 ord524 ord709 __vbaVarZero ord525 ord632 __vbaChkstk ord526 __vbaFileClose ord527 ord528 __vbaGenerateBoundsError __vbaStrCmp __vbaGet3 __vbaAryConstruct2 __vbaVarTstEq __vbaPutOwner3 __vbaI2I4 ord670 __vbaFpUI1 __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaNew __vbaUI1I2 _CIsqrt __vbaVarAnd __vbaUI1I4 __vbaFpCmpCy __vbaVarMul __vbaExceptHandler ord711 ord712 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord607 __vbaI2Str ord608 __vbaFPException ord717 __vbaInStrVar __vbaStrVarVal __vbaUbound __vbaVarCat __vbaGetOwner4 ord535 __vbaI2Var ord537 ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaInStr __vbaVar2Vec __vbaVarInt _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaFreeStrList __vbaVarNot _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaInStrB __vbaAryLock __vbaVarAdd __vbaVarDup __vbaStrToAnsi __vbaFpI4 ord616 ord431 __vbaVarCopy ord617 _CIatan __vbaStrMove ord618 __vbaAryCopy __vbaCastObj ord619 __vbaStrVarCopy _allmul __vbaLenVarB _CItan __vbaAryUnlock __vbaFPInt __vbaUI1Var _CIexp __vbaMidStmtBstr __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2b9201f384c38d6fab710c68cc47ef71

msvbvm60

generic