jaffacakes118_1a1d7523c0eafccd4af139348a36b110733da46821c4c23c6afb3d767bcd2ba5[.]bin

General

Target
jaffacakes118_1a1d7523c0eafccd4af139348a36b110733da46821c4c23c6afb3d767bcd2ba5.bin
Size 152KB
Sample261002-j719psyflf
SHA256 1a1d7523c0eafccd4af139348a36b110733da46821c4c23c6afb3d767bcd2ba5
MD5 13d89f87b01d332fb9a8a781ae24cbbf
SHA1 1483f03de0a7337ba16063d208a14e6540a5c1f6
SHA512 20b62aac8e1da50ae6aea0cac8bd5203dd4b3fc2ec5dff17188a711d6e1e94afceec29b4ce61e9cd585edc14b0d7e6feb9fc727c9532bcb75e1634ea232fd165
SSDEEP 1536:/Iu0wloPlrTCSyOWFLVclPCSNGCF+vX2MU6A17YjZ1LsLNcsmblFCSkzlAk2w6:tiPtdYLmtdoAR71SrCeFdMKO
TLSH
T176E38E22FB90D68EF4084171691A867638097C3058905D47FB89BF9E3A716E3B1FD72B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_1a1d7523c0eafccd4af139348a36b110733da46821c4c23c6afb3d767bcd2ba5.bin

File Explorer

jaffacakes118_1a1d7523c0eafccd4af139348a36b110733da46821c4c23c6afb3d767bcd2ba5.bin

.exe 152KB

jaffacakes118_1a1d7523c0eafccd4af139348a36b110733da46821c4c23c6afb3d767bcd2ba5.bin

IMPHASH f7786063785801b614a1e659e8f2a87d
SHA256 1a1d7523c0eafccd4af139348a36b110733da46821c4c23c6afb3d767bcd2ba5
MD5 13d89f87b01d332fb9a8a781ae24cbbf
SHA1 1483f03de0a7337ba16063d208a14e6540a5c1f6
SHA512 20b62aac8e1da50ae6aea0cac8bd5203dd4b3fc2ec5dff17188a711d6e1e94afceec29b4ce61e9cd585edc14b0d7e6feb9fc727c9532bcb75e1634ea232fd165
SSDEEP 1536:/Iu0wloPlrTCSyOWFLVclPCSNGCF+vX2MU6A17YjZ1LsLNcsmblFCSkzlAk2w6:tiPtdYLmtdoAR71SrCeFdMKO
TLSH
T176E38E22FB90D68EF4084171691A867638097C3058905D47FB89BF9E3A716E3B1FD72B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5936

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaFreeVar __vbaLenBstr __vbaLateIdCall __vbaStrVarMove ord588 __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList __vbaStrErrVarCopy __vbaVarIndexLoadRef _adj_fprem1 __vbaResume __vbaStrCat ord660 __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaVarForInit __vbaExitProc __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad __vbaBoolVar __vbaBoolVarNull __vbaRefVarAry __vbaFpR8 _CIsin __vbaVarCmpGt __vbaChkstk __vbaFileClose __vbaCyVar EVENT_SINK_AddRef ord529 __vbaVarTstEq __vbaI2I4 __vbaObjVar DllFunctionCall __vbaVarLateMemSt __vbaCastObjVar _adj_fpatan __vbaR4Var __vbaLateIdCallLd EVENT_SINK_Release ord600 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaPrintFile __vbaStrToUnicode __vbaInputFile __vbaDateStr _adj_fprem _adj_fdivr_m64 __vbaFPException __vbaUbound __vbaStrVarVal __vbaVarCat ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaInStr ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaI4Var ord610 __vbaLateMemCall __vbaVarDup ord612 __vbaStrToAnsi __vbaVarLateMemCallLd _CIatan __vbaStrMove __vbaCastObj _allmul __vbaLateIdSt _CItan __vbaVarForNext _CIexp __vbaStrCy __vbaFreeObj __vbaFreeStr ord581

Sharing