jaffacakes118_UDS[.]DangerousObject[.]Multi[.]Generic[.]194e767a9c9047a5eb969e2d56836d04

General

Target
jaffacakes118_UDS.DangerousObject.Multi.Generic.194e767a9c9047a5eb969e2d56836d04
Size 784KB
Sample261014-m86scstwev
SHA256 b03f15caac011df1cb84d9ed98b7e09df8d8e10c70dcd75a561e240a0943ca0b
MD5 194e767a9c9047a5eb969e2d56836d04
SHA1 87e0e813523a4ef5818bb73121cdf54aa739b4f9
SHA512 793eb4f2fd6867d5df3d41fd4feb73bc1d0ddbb1ee14fdf2adc7219c26e74c524264e85659e91e73b6b6ce8bdb2eb7df58ab0192597d2b456f14d3cf42c807a4
SSDEEP 12288:wkGy5SG7V6bXgL5QZ2P3LpoccBccc20RA2m9WXLn+H:BrViKm9WXT+H
TLSH
T12B054231F285EC2AC05144753A6AF216846B6F730A00D11FBE8AF76D26F6B81609DF5F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_UDS.DangerousObject.Multi.Generic.194e767a9c9047a5eb969e2d56836d04

File Explorer

jaffacakes118_UDS.DangerousObject.Multi.Generic.194e767a9c9047a5eb969e2d56836d04

.dll 784KB

jaffacakes118_UDS.DangerousObject.Multi.Generic.194e767a9c9047a5eb969e2d56836d04

IMPHASH 20167fdf1eec4f8d240a6fe52e36eb34
SHA256 b03f15caac011df1cb84d9ed98b7e09df8d8e10c70dcd75a561e240a0943ca0b
MD5 194e767a9c9047a5eb969e2d56836d04
SHA1 87e0e813523a4ef5818bb73121cdf54aa739b4f9
SHA512 793eb4f2fd6867d5df3d41fd4feb73bc1d0ddbb1ee14fdf2adc7219c26e74c524264e85659e91e73b6b6ce8bdb2eb7df58ab0192597d2b456f14d3cf42c807a4
SSDEEP 12288:wkGy5SG7V6bXgL5QZ2P3LpoccBccc20RA2m9WXLn+H:BrViKm9WXT+H
TLSH
T12B054231F285EC2AC05144753A6AF216846B6F730A00D11FBE8AF76D26F6B81609DF5F
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub __vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar ord588 __vbaLateIdCall __vbaLineInputStr __vbaStrVarMove __vbaLenBstr __vbaAptOffset ord589 __vbaFreeVarList _adj_fdiv_m64 EVENT_SINK_Invoke __vbaFreeObjList ord516 __vbaVarIndexLoadRef ord517 _adj_fprem1 __vbaRecAnsiToUni ord518 ord519 __vbaStrCat ord660 __vbaLsetFixstr ord661 __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryVar ord667 Zombie_GetTypeInfo __vbaAryDestruct __vbaLateMemSt EVENT_SINK2_Release __vbaStrBool __vbaExitProc __vbaVarForInit ord593 ord594 ord595 __vbaStrLike __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaBoolVar __vbaStrFixstr ord520 __vbaBoolVarNull __vbaVarTstLt _CIsin __vbaErase ord631 __vbaVarCmpGt ord525 ord632 __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef ord527 ord528 __vbaGenerateBoundsError __vbaStrCmp __vbaGet3 ord529 __vbaAryConstruct2 __vbaVarTstEq __vbaI2I4 __vbaObjVar DllFunctionCall __vbaVarLateMemSt __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaRedim __vbaStrR8 __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew _CIsqrt __vbaVarAnd __vbaObjIs EVENT_SINK_QueryInterface __vbaStr2Vec __vbaExceptHandler ord711 __vbaPrintFile __vbaStrToUnicode ord712 ord606 __vbaDateStr _adj_fprem _adj_fdivr_m64 ord607 ord608 ord716 __vbaFPException ord717 __vbaInStrVar ord319 __vbaStrVarVal __vbaUbound __vbaVarCat __vbaDateVar ord535 __vbaI2Var ord537 ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVarLateMemCallLdRf __vbaVar2Vec ord648 ord570 __vbaR8Str __vbaInStr __vbaNew2 _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaStrCopy ord573 EVENT_SINK2_AddRef __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord685 __vbaVarTstNe ord101 __vbaVarSetVar ord102 __vbaI4Var ord103 ord104 ord610 ord105 __vbaAryLock __vbaLateMemCall __vbaVarAdd ord320 __vbaStrComp __vbaVarDup ord612 __vbaStrToAnsi ord321 __vbaFpI2 __vbaVarCopy __vbaVarLateMemCallLd ord616 __vbaFpI4 __vbaLateMemCallLd ord617 _CIatan __vbaAryCopy __vbaStrMove __vbaCastObj __vbaStrVarCopy ord619 ord542 _allmul __vbaLateIdSt ord545 _CItan __vbaAryUnlock __vbaFPInt __vbaVarForNext _CIexp __vbaMidStmtBstr __vbaFreeObj __vbaFreeStr ord581

Sharing