jaffacakes118_UDS[.]DangerousObject[.]Multi[.]Generic[.]4d1674ae8a3c86ac649fe1c1fe85470f

General

Target
jaffacakes118_UDS.DangerousObject.Multi.Generic.4d1674ae8a3c86ac649fe1c1fe85470f
Size 384KB
Sample261014-nm1jwstyfs
SHA256 8e5204b20f2dfdee1660dd6fb2dea278b7dba75e1f30978a9144f63f428d58e5
MD5 4d1674ae8a3c86ac649fe1c1fe85470f
SHA1 1d03f23f2cf0b15093260db5190b51f451315f7f
SHA512 71b93bc253b08d6889d6b81e277a0e9dc6d54e5734ec53734e41ea34dce31cdb4aba4f84f1376a06cc6e71ac337849bf1b0bba6ad718b9a02834acda8efda176
SSDEEP 6144:TYy53IH7Lb4qS8vXUOSegquX3Jg6bzyFiU/199b2xrQCkf:TLYHPb4qSzOp45g6bzKi41721O
TLSH
T1CF84A4164784ED67D89DC8F4260A06B954E45D3B3470BF63BAE37B766B304C2E068E1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_UDS.DangerousObject.Multi.Generic.4d1674ae8a3c86ac649fe1c1fe85470f

File Explorer

jaffacakes118_UDS.DangerousObject.Multi.Generic.4d1674ae8a3c86ac649fe1c1fe85470f

.exe 384KB

jaffacakes118_UDS.DangerousObject.Multi.Generic.4d1674ae8a3c86ac649fe1c1fe85470f

IMPHASH 0c62dfcd7316cb6e646e000d4c755297
SHA256 8e5204b20f2dfdee1660dd6fb2dea278b7dba75e1f30978a9144f63f428d58e5
MD5 4d1674ae8a3c86ac649fe1c1fe85470f
SHA1 1d03f23f2cf0b15093260db5190b51f451315f7f
SHA512 71b93bc253b08d6889d6b81e277a0e9dc6d54e5734ec53734e41ea34dce31cdb4aba4f84f1376a06cc6e71ac337849bf1b0bba6ad718b9a02834acda8efda176
SSDEEP 6144:TYy53IH7Lb4qS8vXUOSegquX3Jg6bzyFiU/199b2xrQCkf:TLYHPb4qSzOp45g6bzKi41721O
TLSH
T1CF84A4164784ED67D89DC8F4260A06B954E45D3B3470BF63BAE37B766B304C2E068E1B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10928

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaEnd __vbaFreeVarList __vbaPut3 _adj_fdiv_m64 __vbaRaiseEvent ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord666 __vbaAryDestruct __vbaExitProc __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaVarIndexLoad __vbaBoolVarNull _CIsin __vbaErase __vbaVarZero ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaPutOwner3 __vbaI2I4 __vbaVarLikeVar DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaRecUniToAnsi __vbaUI1ErrVar EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaStr2Vec __vbaExceptHandler ord712 __vbaStrToUnicode ord713 _adj_fprem _adj_fdivr_m64 ord607 ord608 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaLsetFixstrFree ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaR8Str __vbaVar2Vec __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaI4Str __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaVarAdd __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaVarCopy __vbaFpI4 ord617 _CIatan __vbaStrMove ord619 __vbaR8IntI4 __vbaStrVarCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj ord581

Sharing