jaffacakes118_Virus[.]Win32[.]VB[.]gh[.]b6840cbe3c61169706e528b85812a3e4

General

Target
jaffacakes118_Virus.Win32.VB.gh.b6840cbe3c61169706e528b85812a3e4
Size 3.4MB
Sample261014-p5dnhsds2l
SHA256 2c229b853ac8928a6c1bb03bed89ff3063b064d78be1d6b232c9620c08735a21
MD5 b6840cbe3c61169706e528b85812a3e4
SHA1 7fffc9523062ab0c80bd16f9edbfdc9aa2b62b0b
SHA512 6528d989052ccd4d82589956187a4b3482b03e222577b0be387756c1e97700b10aed7e5b7f5a785a81eff1e030b2987f310c5081c6ef8d288afbfa41e46357f9
SSDEEP 49152:FHAHAHAHAH0butmkO+wAOInO4XrztygxLHkJE4VBWgfnneq4egP3l7p/tjaMGYSg:Ds+wE9XD8VBW8nh0kuIDQci
TLSH
T1B9F54A02935200B7D2522571C82A7B5457647FB82EF3D62BBE1075D6FA32BC2793237A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.VB.gh.b6840cbe3c61169706e528b85812a3e4

File Explorer

jaffacakes118_Virus.Win32.VB.gh.b6840cbe3c61169706e528b85812a3e4

.exe 3.4MB

jaffacakes118_Virus.Win32.VB.gh.b6840cbe3c61169706e528b85812a3e4

IMPHASH ad4e7a75c87d00b0aef55f559d390c99
SHA256 2c229b853ac8928a6c1bb03bed89ff3063b064d78be1d6b232c9620c08735a21
MD5 b6840cbe3c61169706e528b85812a3e4
SHA1 7fffc9523062ab0c80bd16f9edbfdc9aa2b62b0b
SHA512 6528d989052ccd4d82589956187a4b3482b03e222577b0be387756c1e97700b10aed7e5b7f5a785a81eff1e030b2987f310c5081c6ef8d288afbfa41e46357f9
SSDEEP 49152:FHAHAHAHAH0butmkO+wAOInO4XrztygxLHkJE4VBWgfnneq4egP3l7p/tjaMGYSg:Ds+wE9XD8VBW8nh0kuIDQci
TLSH
T1B9F54A02935200B7D2522571C82A7B5457647FB82EF3D62BBE1075D6FA32BC2793237A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5684

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList _adj_fprem1 ord518 __vbaStrCat __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct ord593 __vbaExitProc __vbaForEachCollObj ord594 __vbaOnError ord595 __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaVarTstLt _CIsin __vbaNextEachCollObj __vbaChkstk __vbaFileClose EVENT_SINK_AddRef ord529 __vbaPutOwner3 __vbaPutOwner4 __vbaI2I4 __vbaObjVar __vbaStrR4 _adj_fpatan ord567 EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaPrintFile _adj_fprem _adj_fdivr_m64 ord531 ord716 __vbaFPException __vbaStrVarVal __vbaVarCat _CIlog __vbaErrorOverflow __vbaFileOpen ord570 __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList ord576 _adj_fdivr_m32 _adj_fdiv_r ord578 ord100 __vbaVarTstNe __vbaVarSetVar __vbaLateMemCall __vbaVarDup ord617 _CIatan __vbaStrMove __vbaCastObj ord619 _allmul _CItan __vbaFPInt _CIexp __vbaFreeStr __vbaFreeObj ord580

Sharing