jaffacakes118_UDS[.]DangerousObject[.]Multi[.]Generic[.]34d88cdd9428f021ddff203934175f82

General

Target
jaffacakes118_UDS.DangerousObject.Multi.Generic.34d88cdd9428f021ddff203934175f82
Size 604KB
Sample261014-netflstxdy
SHA256 01f2d1945631286c3ba10a508b933e0c0c5a4b475f51eebe2a9c42382782b02b
MD5 34d88cdd9428f021ddff203934175f82
SHA1 912224155073599d8a9b0271a217197d55ae8e20
SHA512 898e9c8c12cb5785a28a2ff3223cb2b2b8954a369dfe55fbb371d90c00430f1a043ec4702fdfc70f4aed08d80fd1b2ee145b96be44a7358606bad78a5cc8c434
SSDEEP 12288:tXCsdBOVi8e7S2OQgY7uWDO0qq/LBict0ijsUEA4DbM9TI:0KCyz7TDO0qGYHpg4DbM9T
TLSH
T112D47C325F7C86C6E8D328731A25CD7496342E9002476BB7FAACB75C1B6AD1254B423F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_UDS.DangerousObject.Multi.Generic.34d88cdd9428f021ddff203934175f82

File Explorer

jaffacakes118_UDS.DangerousObject.Multi.Generic.34d88cdd9428f021ddff203934175f82

.exe 604KB

jaffacakes118_UDS.DangerousObject.Multi.Generic.34d88cdd9428f021ddff203934175f82

IMPHASH adf463b2b188b88936efb9639270c129
SHA256 01f2d1945631286c3ba10a508b933e0c0c5a4b475f51eebe2a9c42382782b02b
MD5 34d88cdd9428f021ddff203934175f82
SHA1 912224155073599d8a9b0271a217197d55ae8e20
SHA512 898e9c8c12cb5785a28a2ff3223cb2b2b8954a369dfe55fbb371d90c00430f1a043ec4702fdfc70f4aed08d80fd1b2ee145b96be44a7358606bad78a5cc8c434
SSDEEP 12288:tXCsdBOVi8e7S2OQgY7uWDO0qq/LBict0ijsUEA4DbM9TI:0KCyz7TDO0qGYHpg4DbM9T
TLSH
T112D47C325F7C86C6E8D328731A25CD7496342E9002476BB7FAACB75C1B6AD1254B423F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8604

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaFreeVar __vbaStrVarMove ord588 __vbaLenBstr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList _adj_fprem1 __vbaRecAnsiToUni __vbaCopyBytes __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj __vbaLenBstrB _adj_fdiv_m32 __vbaAryDestruct ord591 ord593 __vbaExitProc ord300 __vbaI4Abs __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord599 ord306 __vbaStrFixstr __vbaBoolVar __vbaVarTstLt __vbaBoolVarNull __vbaFpR8 _CIsin ord631 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaPrintObj __vbaI2I4 DllFunctionCall __vbaVarOr __vbaFpUI1 __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaLateIdCallLd __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt __vbaObjIs EVENT_SINK_QueryInterface __vbaUI1I4 __vbaVarMul __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaVarDiv __vbaFPException __vbaInStrVar __vbaStrVarVal __vbaVarCat ord535 __vbaI2Var ord644 _CIlog __vbaErrorOverflow __vbaNew2 __vbaR8Str _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaVarCmpEq __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI2 ord614 ord616 __vbaFpI4 __vbaR8IntI2 __vbaLateMemCallLd _CIatan __vbaStrMove __vbaCastObj __vbaStrVarCopy _allmul __vbaLateIdSt _CItan __vbaFPInt __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr

Sharing