jaffacakes118_UDS[.]DangerousObject[.]Multi[.]Generic[.]6b35e1c4d2f4c60ed8f65c4628342ef0

General

Target
jaffacakes118_UDS.DangerousObject.Multi.Generic.6b35e1c4d2f4c60ed8f65c4628342ef0
Size 221KB
Sample261014-nr2mrafh39
SHA256 bcd609a773b3f7d388f7efa063cfa08383cd37346d870703c43e642239c95e4c
MD5 6b35e1c4d2f4c60ed8f65c4628342ef0
SHA1 c2f7fad97e0a7968d9432998c8cb9ae3687daec2
SHA512 821ffddbc7b3e4ff5681ddbff64ac17a5029892fb53e476e2566b842d297892fef8df3d6a6cb8c5687aa7922f7e609ca9be3579b1899422f0340152779c84fdf
SSDEEP 6144:A+uZOCuQE2J/5Uttobtgu6e9LGWnl0OrwFvhGl8Sa5waml:AxIUrJBU8b2u6e9LGWnl0O0FvoVqwjl
TLSH
T1C724AE2255557807FC818E302AA660F31B38F9382C46890ABB45479E797D7D378F263F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_UDS.DangerousObject.Multi.Generic.6b35e1c4d2f4c60ed8f65c4628342ef0

File Explorer

jaffacakes118_UDS.DangerousObject.Multi.Generic.6b35e1c4d2f4c60ed8f65c4628342ef0

.exe 221KB

jaffacakes118_UDS.DangerousObject.Multi.Generic.6b35e1c4d2f4c60ed8f65c4628342ef0

IMPHASH f33db57e7bab9b423c687e6923649df3
SHA256 bcd609a773b3f7d388f7efa063cfa08383cd37346d870703c43e642239c95e4c
MD5 6b35e1c4d2f4c60ed8f65c4628342ef0
SHA1 c2f7fad97e0a7968d9432998c8cb9ae3687daec2
SHA512 821ffddbc7b3e4ff5681ddbff64ac17a5029892fb53e476e2566b842d297892fef8df3d6a6cb8c5687aa7922f7e609ca9be3579b1899422f0340152779c84fdf
SSDEEP 6144:A+uZOCuQE2J/5Uttobtgu6e9LGWnl0OrwFvhGl8Sa5waml:AxIUrJBU8b2u6e9LGWnl0O0FvoVqwjl
TLSH
T1C724AE2255557807FC818E302AA660F31B38F9382C46890ABB45479E797D7D378F263F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaR8ForNextCheck _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList ord516 _adj_fprem1 __vbaCopyBytes __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj ord665 _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc ord593 ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad _CIsin ord631 __vbaErase ord525 ord632 __vbaVarZero __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaStrCmp __vbaGet3 __vbaPutOwner3 __vbaAryConstruct2 DllFunctionCall __vbaFpUI1 __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaRedim __vbaUI1ErrVar EVENT_SINK_Release ord601 _CIsqrt EVENT_SINK_QueryInterface __vbaStr2Vec __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaI2Str ord608 __vbaFPException ord717 __vbaGetOwner3 __vbaStrVarVal __vbaUbound __vbaVarCat ord537 ord644 _CIlog __vbaFileOpen ord648 ord570 __vbaVar2Vec __vbaInStr __vbaNew2 _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord578 ord685 ord100 __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI4 __vbaVarCopy _CIatan __vbaStrMove __vbaR8IntI4 _allmul _CItan __vbaAryUnlock _CIexp __vbaMidStmtBstr __vbaFreeStr __vbaI4ErrVar __vbaFreeObj ord581

Sharing