jaffacakes118_Worm[.]Win32[.]WBNA[.]ipa[.]1981f10f890c626623c8549ae8c3c9b6

General

Target
jaffacakes118_Worm.Win32.WBNA.ipa.1981f10f890c626623c8549ae8c3c9b6
Size 208KB
Sample261014-qlg29sdw5x
SHA256 7239697b75f400dda593d7381c0bd1a14dac086eb43d48bed7c994ffcf9b9b9d
MD5 1981f10f890c626623c8549ae8c3c9b6
SHA1 13a52cbff95306912e895ef06766a9298203b5e9
SHA512 40627fd37256c20a6024332e1af6cd9739cb3fb221c547d857a29c9416818cb469b457f771eac912018cb7907c3a1237fa5498d2e345efa69826edc2e1f7cccd
SSDEEP 3072:m66fQxMqTIzNOJ7UBs2V4b9fO9/uqXyW7MqjT39+CpnbctdoGtjzeqFWQ1E+Z:m6FlMz+QGgJLCIjjjRnbcDRtHegG
TLSH
T1CD243E95B380ABBBE4B18EF6A785431350D46C3865C5B213B3D1A7162678CE7C2707EB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Worm.Win32.WBNA.ipa.1981f10f890c626623c8549ae8c3c9b6

File Explorer

jaffacakes118_Worm.Win32.WBNA.ipa.1981f10f890c626623c8549ae8c3c9b6

.exe 208KB

jaffacakes118_Worm.Win32.WBNA.ipa.1981f10f890c626623c8549ae8c3c9b6

IMPHASH 6f095560a12c58ea9aca11d5c4789e23
SHA256 7239697b75f400dda593d7381c0bd1a14dac086eb43d48bed7c994ffcf9b9b9d
MD5 1981f10f890c626623c8549ae8c3c9b6
SHA1 13a52cbff95306912e895ef06766a9298203b5e9
SHA512 40627fd37256c20a6024332e1af6cd9739cb3fb221c547d857a29c9416818cb469b457f771eac912018cb7907c3a1237fa5498d2e345efa69826edc2e1f7cccd
SSDEEP 3072:m66fQxMqTIzNOJ7UBs2V4b9fO9/uqXyW7MqjT39+CpnbctdoGtjzeqFWQ1E+Z:m6FlMz+QGgJLCIjjjRnbcDRtHegG
TLSH
T1CD243E95B380ABBBE4B18EF6A785431350D46C3865C5B213B3D1A7162678CE7C2707EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15100

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress LoadLibraryW

msvbvm60

__vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaHresultCheck ord693 __vbaVarVargNofree __vbaFreeVar ord694 __vbaAryMove __vbaStrVarMove __vbaLenBstr ord695 ord696 __vbaEnd __vbaFreeVarList __vbaPut3 _adj_fdiv_m64 __vbaPut4 ord512 ord513 ord514 ord515 ord516 ord517 _adj_fprem1 ord518 ord519 ord628 __vbaCopyBytes __vbaStrCat ord629 __vbaInStrVarB __vbaLsetFixstr __vbaHresultCheckObj __vbaLenBstrB _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarIndexLoadRefLock ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord520 __vbaStrFixstr ord521 ord522 ord523 ord708 __vbaBoolVarNull __vbaFpR8 _CIsin ord709 __vbaErase ord631 ord524 __vbaVarZero ord632 ord525 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError ord528 __vbaStrCmp __vbaGet3 __vbaVarTstEq __vbaPutOwner3 __vbaAryConstruct2 __vbaI2I4 ord670 __vbaVarOr ord564 __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaFpCmpCy __vbaVarMul ord710 __vbaExceptHandler ord711 ord712 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaVarDiv ord607 __vbaI2Str ord608 __vbaFPException ord717 __vbaInStrVar __vbaStrCompVar __vbaStrVarVal __vbaUbound __vbaVarCat __vbaGetOwner4 ord535 __vbaI2Var ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaInStr __vbaVar2Vec __vbaVarInt _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList __vbaVarNot __vbaDerefAry1 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaVarAdd __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaVarCopy ord616 ord431 __vbaFpI4 __vbaUnkVar ord617 _CIatan __vbaStrMove __vbaAryCopy ord618 __vbaCastObj ord619 __vbaStrVarCopy _allmul __vbaLenVarB _CItan __vbaUI1Var __vbaAryUnlock __vbaFPInt _CIexp __vbaMidStmtBstr __vbaFreeObj __vbaFreeStr __vbaI4ErrVar

Sharing