jaffacakes118_b37ac80e7c05f254b5b5c62dae51641d1fc9477e36e5c06ebd7dd280396c7f2b[.]bin

General

Target
jaffacakes118_b37ac80e7c05f254b5b5c62dae51641d1fc9477e36e5c06ebd7dd280396c7f2b.bin
Size 156KB
Sample260924-tvs3nsysay
SHA256 b37ac80e7c05f254b5b5c62dae51641d1fc9477e36e5c06ebd7dd280396c7f2b
MD5 68b42c042930511f76ad235dcae5205b
SHA1 05a1894371f22edab62dec185e01864cb84fd55d
SHA512 707b3428e3d519fe93e6b8f2e7d46a0f7e121dce86ed07d001fbaad05345fc74befceb69041bf59eec426aeab593f845a1f990b8d324d6901089031cfe5cc030
SSDEEP 3072:AuCHpxhQ0ILEfLfrA7TrLOIK8t1RmeEZpNBa7knS7WDgVuKvLaKLPgwJpsPjIhjy:2LhQdfoEsP0h/z/RXD+zjRaZ
TLSH
T141F308238F084A01EE61C970141666F4F869A955B4206E079682ED7C1EF5F93BEFD3CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_b37ac80e7c05f254b5b5c62dae51641d1fc9477e36e5c06ebd7dd280396c7f2b.bin

File Explorer

jaffacakes118_b37ac80e7c05f254b5b5c62dae51641d1fc9477e36e5c06ebd7dd280396c7f2b.bin

.exe 156KB

jaffacakes118_b37ac80e7c05f254b5b5c62dae51641d1fc9477e36e5c06ebd7dd280396c7f2b.bin

IMPHASH 6f47b60b934e7e6f43e4df4b5b4df51e
SHA256 b37ac80e7c05f254b5b5c62dae51641d1fc9477e36e5c06ebd7dd280396c7f2b
MD5 68b42c042930511f76ad235dcae5205b
SHA1 05a1894371f22edab62dec185e01864cb84fd55d
SHA512 707b3428e3d519fe93e6b8f2e7d46a0f7e121dce86ed07d001fbaad05345fc74befceb69041bf59eec426aeab593f845a1f990b8d324d6901089031cfe5cc030
SSDEEP 3072:AuCHpxhQ0ILEfLfrA7TrLOIK8t1RmeEZpNBa7knS7WDgVuKvLaKLPgwJpsPjIhjy:2LhQdfoEsP0h/z/RXD+zjRaZ
TLSH
T141F308238F084A01EE61C970141666F4F869A955B4206E079682ED7C1EF5F93BEFD3CB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaFreeVar __vbaLenBstr __vbaLateIdCall __vbaStrVarMove ord588 ord589 __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaLateMemSt __vbaForEachCollObj __vbaExitProc __vbaOnError __vbaObjSet ord595 ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord599 __vbaFpR4 ord520 __vbaBoolVarNull __vbaFpR8 _CIsin ord632 __vbaNextEachCollObj __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 __vbaStrCmp __vbaVarTstEq __vbaI2I4 __vbaPrintObj DllFunctionCall __vbaCastObjVar _adj_fpatan __vbaR4Var __vbaLateIdCallLd __vbaRedim EVENT_SINK_Release __vbaNew ord600 _CIsqrt __vbaObjIs EVENT_SINK_QueryInterface __vbaVarMul __vbaExceptHandler ord711 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaVarDiv __vbaFPException __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var ord645 _CIlog __vbaErrorOverflow __vbaNew2 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaFpI2 __vbaFpI4 ord617 _CIatan __vbaStrMove __vbaCastObj __vbaAryCopy ord650 _allmul __vbaLateIdSt _CItan _CIexp __vbaFreeObj __vbaFreeStr ord581

Sharing