jaffacakes118_Packed[.]Win32[.]PePatch[.]jw[.]70167ac9e6a4e44c4638a90831cec904

General

Target
jaffacakes118_Packed.Win32.PePatch.jw.70167ac9e6a4e44c4638a90831cec904
Size 336KB
Sample261012-xtargsdz5w
SHA256 84adbfb10e5904fe224359421223957d27ad8a27e6c8c4aa26fd5d9fed7059b4
MD5 70167ac9e6a4e44c4638a90831cec904
SHA1 5310ea80347abf521677bf05526d4b9140f1802b
SHA512 3141de272e043c0c150dcb8dc42e91485eda477864bc5ae9d1d87347c5c2fb1939e8be7369060a783f4740566608c1cc36b03a0b07211d446f32120aa1efcba6
SSDEEP 6144:OEhNC7rGN3bkty0Mki8787O71rkhjSammcmZP:+7rGNrkty0fkhGlmvP
TLSH
T187745AE67680CAB7E63B0B34A1D2E770047EBFF13D528943945436CA2B71C496A1793B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Packed.Win32.PePatch.jw.70167ac9e6a4e44c4638a90831cec904

File Explorer

jaffacakes118_Packed.Win32.PePatch.jw.70167ac9e6a4e44c4638a90831cec904

.exe 336KB

jaffacakes118_Packed.Win32.PePatch.jw.70167ac9e6a4e44c4638a90831cec904

IMPHASH 6bb09941559e8d622f62faba5727aa08
SHA256 84adbfb10e5904fe224359421223957d27ad8a27e6c8c4aa26fd5d9fed7059b4
MD5 70167ac9e6a4e44c4638a90831cec904
SHA1 5310ea80347abf521677bf05526d4b9140f1802b
SHA512 3141de272e043c0c150dcb8dc42e91485eda477864bc5ae9d1d87347c5c2fb1939e8be7369060a783f4740566608c1cc36b03a0b07211d446f32120aa1efcba6
SSDEEP 6144:OEhNC7rGN3bkty0Mki8787O71rkhjSammcmZP:+7rGNrkty0fkhGlmvP
TLSH
T187745AE67680CAB7E63B0B34A1D2E770047EBFF13D528943945436CA2B71C496A1793B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

40993

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaSetSystemError __vbaHresultCheckObj __vbaVargVarCopy _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct ord595 __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i _CIsin ord631 __vbaErase ord525 __vbaVarZero ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall ord563 __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaRedim EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaStr2Vec __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaInStr __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaAryVarVarg ord616 _CIatan __vbaAryCopy __vbaStrMove _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaI4ErrVar __vbaFreeStr

Sharing