jaffacakes118_80a1686ff3164c4abbfd670aa46c5f628c1e89885216d726ac684fb0eec8af71[.]bin

General

Target
jaffacakes118_80a1686ff3164c4abbfd670aa46c5f628c1e89885216d726ac684fb0eec8af71.bin
Size 140KB
Sample261002-j8glpayfqf
SHA256 80a1686ff3164c4abbfd670aa46c5f628c1e89885216d726ac684fb0eec8af71
MD5 bd28d9b62f7cc4a847f572a92c2f959b
SHA1 2b493d2c6dabd006cfed525e581d237faef15258
SHA512 999043548cfc56075d1f85bbf26d1bd75b27797bf91de5190cec6b040d4caa1156edc75e6791cefe4f215273cbccf79ac9b2ce5c4fcd88068e0a966142d2233c
SSDEEP 3072:/7GrYfN3Vj5jjsi1CZpL8P8bR/OBFikH/7WXk0j9Wpzm:DGrYBLWOBFikH/7BHz
TLSH
T1B0E3F922F392E41FDD8200752A1BB7FE0D286F325644910FB7C9EF4D593799AA822717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_80a1686ff3164c4abbfd670aa46c5f628c1e89885216d726ac684fb0eec8af71.bin

File Explorer

jaffacakes118_80a1686ff3164c4abbfd670aa46c5f628c1e89885216d726ac684fb0eec8af71.bin

.dll 140KB

jaffacakes118_80a1686ff3164c4abbfd670aa46c5f628c1e89885216d726ac684fb0eec8af71.bin

IMPHASH d81dafc9d063f4f510fface63fd5a6d6
SHA256 80a1686ff3164c4abbfd670aa46c5f628c1e89885216d726ac684fb0eec8af71
MD5 bd28d9b62f7cc4a847f572a92c2f959b
SHA1 2b493d2c6dabd006cfed525e581d237faef15258
SHA512 999043548cfc56075d1f85bbf26d1bd75b27797bf91de5190cec6b040d4caa1156edc75e6791cefe4f215273cbccf79ac9b2ce5c4fcd88068e0a966142d2233c
SSDEEP 3072:/7GrYfN3Vj5jjsi1CZpL8P8bR/OBFikH/7WXk0j9Wpzm:DGrYBLWOBFikH/7BHz
TLSH
T1B0E3F922F392E41FDD8200752A1BB7FE0D286F325644910FB7C9EF4D593799AA822717
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7668

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub __vbaVarTstGt _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaStrVarMove ord588 __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 EVENT_SINK_Invoke __vbaRaiseEvent __vbaFreeObjList _adj_fprem1 __vbaRecAnsiToUni __vbaI4Sgn __vbaStrCat __vbaVarCmpNe __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaVarTstLe Zombie_GetTypeInfo __vbaVarCmpGe __vbaAryDestruct ord592 __vbaForEachCollObj ord300 __vbaI4Abs ord301 __vbaObjSet __vbaOnError ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord305 __vbaFpR4 ord306 __vbaBoolVar ord307 __vbaBoolVarNull __vbaFpR8 __vbaVarTstLt _CIsin ord631 __vbaErase __vbaNextEachCollObj __vbaVargVarMove __vbaChkstk __vbaCyVar EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaExitEachColl __vbaVarTstEq ord561 __vbaI2I4 DllFunctionCall __vbaVarLateMemSt __vbaFpUI1 __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt __vbaObjIs __vbaVarAnd ord311 EVENT_SINK_QueryInterface __vbaExceptHandler ord313 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaFailedFriend __vbaFPException ord319 __vbaUbound __vbaI2Var ord644 _CIlog __vbaErrorOverflow __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList __vbaVarCmpLt _adj_fdivr_m32 _adj_fdiv_r __vbaVarTstNe ord101 ord102 __vbaI4Var ord103 __vbaVarCmpEq ord104 ord105 __vbaAryLock __vbaVarAdd ord320 __vbaStrToAnsi __vbaVarDup ord321 __vbaFpI2 __vbaVarLateMemCallLd __vbaVarCopy __vbaFpI4 __vbaVarTstGe _CIatan __vbaStrMove __vbaCastObj __vbaStrVarCopy _allmul __vbaLateIdSt _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr ord581

Sharing