jaffacakes118_03288612367e4a9e4c1fdbecd5058173937c8a0fdecba4f11cc5081e7d523b75[.]bin

General

Target
jaffacakes118_03288612367e4a9e4c1fdbecd5058173937c8a0fdecba4f11cc5081e7d523b75.bin
Size 72KB
Sample260923-zb32escc79
SHA256 03288612367e4a9e4c1fdbecd5058173937c8a0fdecba4f11cc5081e7d523b75
MD5 40c155516c31bbe4ebf7ce9691c4c891
SHA1 f0072b8550d6e876f121e4e76d839fb258b39865
SHA512 52cd29be708f822f6554120f533dae3b955cb8413110b7ffd477b81368f104d6b90135a6a3ab7152503bd0239f18be09341cfd5c1117e51f316ca90dc3edb46f
SSDEEP 768:qt0m8LkWeuIKeunHeu/9Ugucytnb6XXtc7qdCturObnO:qt06ayZbSc7qdCgijO
TLSH
T156735A23A96C9AB3EB9D4971042396E425373C217540CF8F31D1BA8D5D732837ABA71B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_03288612367e4a9e4c1fdbecd5058173937c8a0fdecba4f11cc5081e7d523b75.bin

File Explorer

jaffacakes118_03288612367e4a9e4c1fdbecd5058173937c8a0fdecba4f11cc5081e7d523b75.bin

.exe 72KB

jaffacakes118_03288612367e4a9e4c1fdbecd5058173937c8a0fdecba4f11cc5081e7d523b75.bin

IMPHASH d9bb80e8157f7b434cf41823ffd33b8e
SHA256 03288612367e4a9e4c1fdbecd5058173937c8a0fdecba4f11cc5081e7d523b75
MD5 40c155516c31bbe4ebf7ce9691c4c891
SHA1 f0072b8550d6e876f121e4e76d839fb258b39865
SHA512 52cd29be708f822f6554120f533dae3b955cb8413110b7ffd477b81368f104d6b90135a6a3ab7152503bd0239f18be09341cfd5c1117e51f316ca90dc3edb46f
SSDEEP 768:qt0m8LkWeuIKeunHeu/9Ugucytnb6XXtc7qdCturObnO:qt06ayZbSc7qdCgijO
TLSH
T156735A23A96C9AB3EB9D4971042396E425373C217540CF8F31D1BA8D5D732837ABA71B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5428

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove ord588 __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaStrCat ord660 __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaLateMemSt __vbaVarForInit __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord520 __vbaBoolVarNull _CIsin ord631 __vbaChkstk ord526 EVENT_SINK_AddRef __vbaStrCmp __vbaVarTstEq __vbaI2I4 __vbaPrintObj DllFunctionCall __vbaCastObjVar _adj_fpatan EVENT_SINK_Release __vbaNew ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaVarDiv ord716 __vbaFPException __vbaStrVarVal __vbaVarCat ord535 ord537 ord645 _CIlog __vbaErrorOverflow __vbaInStr __vbaNew2 __vbaVarLateMemCallLdRf _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaLateMemCall __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaFpI2 __vbaVarMod __vbaVarCopy __vbaFpI4 __vbaVarTstGe __vbaVarLateMemCallLd ord617 __vbaLateMemCallLd _CIatan __vbaStrMove __vbaCastObj ord541 __vbaStrVarCopy _allmul _CItan __vbaVarForNext _CIexp __vbaMidStmtBstr __vbaFreeObj __vbaFreeStr ord581

Sharing