jaffacakes118_HackTool[.]Win32[.]Agent[.]afwk[.]05226e06c1845cb91561650fa0656c7f

General

Target
jaffacakes118_HackTool.Win32.Agent.afwk.05226e06c1845cb91561650fa0656c7f
Size 768KB
Sample261009-vrqntada62
SHA256 3dd24155567dd633b4cf53d933e7ec7ae649102b5714ebb924b013efa7b0ba89
MD5 05226e06c1845cb91561650fa0656c7f
SHA1 c09adb78e2c7a34a6605deb4507a07ede16cea2d
SHA512 f050a9e60832fbc9ade5628c2b85637fc2c7cbdfeb246334b1cf48a33891a213b0439a16343fafa03a32176142ffb4662ac584b9b7a03a178c0b4a615ca833e0
SSDEEP 12288:l4RdrDo2n3Jg6mZBiYg/3zlWdjxUfg7GScstDogbUl2Vl7SaT2m:mIZBiYc4xkSGNYDoBl2Vl7SaT2
TLSH
T1A2F4D62FB390B735DE42C4B02A5A1661849DE43438B4AC47E3C2AB1D77E2DD3E52A753
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HackTool.Win32.Agent.afwk.05226e06c1845cb91561650fa0656c7f

File Explorer

jaffacakes118_HackTool.Win32.Agent.afwk.05226e06c1845cb91561650fa0656c7f

.exe 768KB

jaffacakes118_HackTool.Win32.Agent.afwk.05226e06c1845cb91561650fa0656c7f

IMPHASH 15a650a6dc44c1b59a08fecda2358c74
SHA256 3dd24155567dd633b4cf53d933e7ec7ae649102b5714ebb924b013efa7b0ba89
MD5 05226e06c1845cb91561650fa0656c7f
SHA1 c09adb78e2c7a34a6605deb4507a07ede16cea2d
SHA512 f050a9e60832fbc9ade5628c2b85637fc2c7cbdfeb246334b1cf48a33891a213b0439a16343fafa03a32176142ffb4662ac584b9b7a03a178c0b4a615ca833e0
SSDEEP 12288:l4RdrDo2n3Jg6mZBiYg/3zlWdjxUfg7GScstDogbUl2Vl7SaT2m:mIZBiYc4xkSGNYDoBl2Vl7SaT2
TLSH
T1A2F4D62FB390B735DE42C4B02A5A1661849DE43438B4AC47E3C2AB1D77E2DD3E52A753
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16188

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaHresultCheck __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLateIdCall ord588 __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList __vbaLineInputVar ord516 __vbaVarFix _adj_fprem1 ord518 __vbaRecAnsiToUni __vbaStrCat __vbaVarCmpNe __vbaLsetFixstr __vbaSetSystemError ord662 __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 ord666 __vbaVarTstLe __vbaVarCmpGe __vbaAryDestruct __vbaLateMemSt ord593 __vbaVarPow __vbaVarForInit __vbaStrBool ord300 ord594 ord301 __vbaObjSet ord595 __vbaOnError _adj_fdiv_m16i ord303 __vbaObjSetAddref _adj_fdivr_m16i ord304 ord598 __vbaFpR4 ord306 ord520 __vbaForEachCollVar __vbaBoolVar ord307 __vbaFPFix ord309 __vbaFpR8 __vbaVarTstLt __vbaBoolVarNull _CIsin ord631 ord525 __vbaVarCmpGt ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef ord528 __vbaGenerateBoundsError ord529 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaR4Str ord561 __vbaNextEachCollVar __vbaObjVar DllFunctionCall __vbaVarOr __vbaVarLateMemSt __vbaFpUI1 ord564 __vbaCastObjVar __vbaLbound __vbaStrR4 _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaLateIdCallLd __vbaRedim __vbaStrR8 __vbaUI1ErrVar __vbaRecUniToAnsi EVENT_SINK_Release ord600 _CIsqrt ord310 __vbaLateIdCallSt __vbaVarAnd EVENT_SINK_QueryInterface __vbaVarMul __vbaStrUI1 __vbaExceptHandler ord312 __vbaStrToUnicode __vbaPrintFile ord606 _adj_fprem _adj_fdivr_m64 __vbaVarDiv ord607 ord714 __vbaI2Str ord608 ord716 __vbaVarCmpLe __vbaFPException __vbaInStrVar ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord535 __vbaDateVar ord536 __vbaI2Var ord644 ord537 ord645 _CIlog __vbaFileOpen __vbaVarLateMemCallLdRf __vbaVar2Vec __vbaNew2 __vbaR8Str ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaVarSetObj ord573 __vbaI4Str ord681 __vbaFreeStrList __vbaVarCmpLt __vbaDerefAry1 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var __vbaVarCmpEq ord610 __vbaAryLock __vbaVarAdd __vbaLateMemCall ord612 __vbaVarDup __vbaStrToAnsi ord613 __vbaFpI2 __vbaCheckTypeVar __vbaVarTstGe ord616 __vbaVarCopy __vbaVarLateMemCallLd __vbaFpI4 __vbaLateMemCallLd ord617 _CIatan ord618 __vbaI2ErrVar __vbaStrMove __vbaCastObj __vbaStrVarCopy ord619 ord543 _allmul __vbaLateIdSt __vbaFpCSngR4 ord544 _CItan ord546 __vbaAryUnlock __vbaFPInt ord547 __vbaFpCSngR8 __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing