jaffacakes118_Packed[.]Win32[.]PasswordProtectedExe[.]gen[.]c3a31352e1347722d5bce52688c41d44

General

Target
jaffacakes118_Packed.Win32.PasswordProtectedExe.gen.c3a31352e1347722d5bce52688c41d44
Size 485KB
Sample261014-kmclaaav2x
SHA256 36b33c0758438b70e224408f2207e1e7e03fea7974097ae4d5fbc1c4fbfbe2fa
MD5 c3a31352e1347722d5bce52688c41d44
SHA1 9556dff9b144ecfd2fdb3008abc043dcadc9ff8a
SHA512 24c3dd366290de872823d26cc3ea62aa392f084482fc56cf629b68fceddc0317e9e3ffdbe4f6ec19d77fedf79df3cb0593e8f0b3da9d7b138e13e55e5b3b4730
SSDEEP 6144:CQC+QjWWlMpTJpWgUe+cHNbKFFY+hDe2gjbnAC1Hd4BPlPtNbsUkrk0SindmFY:hC+QjRM/pBP+BAA+HuPnpFiS4dmq
TLSH
T158B4F123B4C441B7F85606F82C75C3297A5BBCF02A56A94A3E9FBD8C5F32642585831F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Packed.Win32.PasswordProtectedExe.gen.c3a31352e1347722d5bce52688c41d44

File Explorer

jaffacakes118_Packed.Win32.PasswordProtectedExe.gen.c3a31352e1347722d5bce52688c41d44

.exe 485KB

jaffacakes118_Packed.Win32.PasswordProtectedExe.gen.c3a31352e1347722d5bce52688c41d44

IMPHASH 8dc6597af439280ef1f78aaf66fc335f
SHA256 36b33c0758438b70e224408f2207e1e7e03fea7974097ae4d5fbc1c4fbfbe2fa
MD5 c3a31352e1347722d5bce52688c41d44
SHA1 9556dff9b144ecfd2fdb3008abc043dcadc9ff8a
SHA512 24c3dd366290de872823d26cc3ea62aa392f084482fc56cf629b68fceddc0317e9e3ffdbe4f6ec19d77fedf79df3cb0593e8f0b3da9d7b138e13e55e5b3b4730
SSDEEP 6144:CQC+QjWWlMpTJpWgUe+cHNbKFFY+hDe2gjbnAC1Hd4BPlPtNbsUkrk0SindmFY:hC+QjRM/pBP+BAA+HuPnpFiS4dmq
TLSH
T158B4F123B4C441B7F85606F82C75C3297A5BBCF02A56A94A3E9FBD8C5F32642585831F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaI2Sgn _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord516 ord517 _adj_fprem1 __vbaRecAnsiToUni ord519 __vbaCopyBytes __vbaStrCat __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc __vbaVarForInit __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaFpR4 __vbaStrFixstr __vbaVarTstLt _CIsin ord631 ord525 ord632 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaI2I4 DllFunctionCall __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaLateIdCallLd __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaVarDiv __vbaFPException __vbaInStrVar __vbaUbound __vbaStrVarVal ord535 __vbaI2Var ord537 ord645 _CIlog __vbaErrorOverflow __vbaR8Str __vbaInStr __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaVarAdd __vbaVarDup __vbaStrToAnsi ord616 __vbaFpI4 __vbaRecDestructAnsi _CIatan ord618 __vbaStrMove __vbaCastObj __vbaStrVarCopy _allmul __vbaLateIdSt _CItan __vbaVarForNext _CIexp __vbaMidStmtBstr __vbaFreeObj __vbaFreeStr

Sharing