jaffacakes118_HackTool[.]Win32[.]Agent[.]afrq[.]80017ae6c03f3c1bdd796f02479b73e9

General

Target
jaffacakes118_HackTool.Win32.Agent.afrq.80017ae6c03f3c1bdd796f02479b73e9
Size 76KB
Sample261011-1kldeahd89
SHA256 b76af94da133c9f5280dabd9866c438d2764e7ad28db052844ca77d83b1d5a40
MD5 80017ae6c03f3c1bdd796f02479b73e9
SHA1 9d1e27152e281d6e3029ff9ae2bde4fda10c5efb
SHA512 60959bfa320e37356b39dd4c7acabfd5baca023c41693046f549a444db05cced6d2432e0364c78575c2379a6d49fac98d2ac8950a9991c21f08af2fe9c3bc0d5
SSDEEP 1536:2UYbZYbfb+F+/BFNYnd0xwEAf6uxq9QCtmVd:FUm+ETNSpEALV
TLSH
T110736D2369A80A62EBD80AF10C35D7642A267C311911CD1F2205FEA87E75F63BDF9717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HackTool.Win32.Agent.afrq.80017ae6c03f3c1bdd796f02479b73e9

File Explorer

jaffacakes118_HackTool.Win32.Agent.afrq.80017ae6c03f3c1bdd796f02479b73e9

.exe 76KB

jaffacakes118_HackTool.Win32.Agent.afrq.80017ae6c03f3c1bdd796f02479b73e9

IMPHASH 8dc6597af439280ef1f78aaf66fc335f
SHA256 b76af94da133c9f5280dabd9866c438d2764e7ad28db052844ca77d83b1d5a40
MD5 80017ae6c03f3c1bdd796f02479b73e9
SHA1 9d1e27152e281d6e3029ff9ae2bde4fda10c5efb
SHA512 60959bfa320e37356b39dd4c7acabfd5baca023c41693046f549a444db05cced6d2432e0364c78575c2379a6d49fac98d2ac8950a9991c21f08af2fe9c3bc0d5
SSDEEP 1536:2UYbZYbfb+F+/BFNYnd0xwEAf6uxq9QCtmVd:FUm+ETNSpEALV
TLSH
T110736D2369A80A62EBD80AF10C35D7642A267C311911CD1F2205FEA87E75F63BDF9717
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5984

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaI2Sgn _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord516 ord517 _adj_fprem1 __vbaRecAnsiToUni ord519 __vbaCopyBytes __vbaStrCat __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc __vbaVarForInit __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaFpR4 __vbaStrFixstr __vbaVarTstLt _CIsin ord631 ord525 ord632 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaI2I4 DllFunctionCall __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaLateIdCallLd __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaVarDiv __vbaFPException __vbaInStrVar __vbaUbound __vbaStrVarVal ord535 __vbaI2Var ord537 ord645 _CIlog __vbaErrorOverflow __vbaR8Str __vbaInStr __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaVarAdd __vbaVarDup __vbaStrToAnsi ord616 __vbaFpI4 __vbaRecDestructAnsi _CIatan ord618 __vbaStrMove __vbaCastObj __vbaStrVarCopy _allmul __vbaLateIdSt _CItan __vbaVarForNext _CIexp __vbaMidStmtBstr __vbaFreeObj __vbaFreeStr

Sharing