jaffacakes118_Worm[.]Win32[.]WBNA[.]yjh[.]355873cf9214ff6dfdf1a24848059c9e

General

Target
jaffacakes118_Worm.Win32.WBNA.yjh.355873cf9214ff6dfdf1a24848059c9e
Size 128KB
Sample261014-qs8tkagd52
SHA256 d4a85af9fa0581eb188855a9afd79ed66ac9a14ef1554afedb6766eca4b012af
MD5 355873cf9214ff6dfdf1a24848059c9e
SHA1 b866b1058a560d3b94c963da1722a520155d8904
SHA512 beba9ab8a776ce4ea4bbab4cd3b3e5da4bc06c192490ebc7b612e73dfdd1103daa4e7f6736679086edc2f2e50bbbe4e65d8e6ae3ef42317ebfc1e21bec69058e
SSDEEP 1536:w4RonnP0hjtM00so4pzEACaRBLAoVH1lOQYJ6iibQRVNNhK5a5aeSNg2w4DewJAz:HRo0ZeNso4pzwsHh1hbaEdEA
TLSH
T172D3F622A291EA7AC55587F01E294794953AFC3105D69E13F3C1BB397AB2E93D732303
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Worm.Win32.WBNA.yjh.355873cf9214ff6dfdf1a24848059c9e

File Explorer

jaffacakes118_Worm.Win32.WBNA.yjh.355873cf9214ff6dfdf1a24848059c9e

.exe 128KB

jaffacakes118_Worm.Win32.WBNA.yjh.355873cf9214ff6dfdf1a24848059c9e

IMPHASH 0c662fcd68cda5ef5971229f4a51594b
SHA256 d4a85af9fa0581eb188855a9afd79ed66ac9a14ef1554afedb6766eca4b012af
MD5 355873cf9214ff6dfdf1a24848059c9e
SHA1 b866b1058a560d3b94c963da1722a520155d8904
SHA512 beba9ab8a776ce4ea4bbab4cd3b3e5da4bc06c192490ebc7b612e73dfdd1103daa4e7f6736679086edc2f2e50bbbe4e65d8e6ae3ef42317ebfc1e21bec69058e
SSDEEP 1536:w4RonnP0hjtM00so4pzEACaRBLAoVH1lOQYJ6iibQRVNNhK5a5aeSNg2w4DewJAz:HRo0ZeNso4pzwsHh1hbaEdEA
TLSH
T172D3F622A291EA7AC55587F01E294794953AFC3105D69E13F3C1BB397AB2E93D732303
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9508

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub ord183 __vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaFreeVar __vbaAryMove ord588 __vbaLenBstr __vbaStrVarMove __vbaFreeVarList __vbaEnd _adj_fdiv_m64 ord515 __vbaFreeObjList _adj_fprem1 __vbaRecAnsiToUni ord519 __vbaCopyBytes __vbaStrCat __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaI4Abs __vbaObjSet __vbaOnError __vbaStrLike _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord598 __vbaRefVarAry __vbaVarTstLt _CIsin ord631 __vbaErase ord709 __vbaVarZero __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaPutOwner3 __vbaI2I4 ord561 __vbaObjVar DllFunctionCall __vbaVarOr ord670 __vbaFpUI1 __vbaStrR4 __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaLateIdCallLd ord677 __vbaRedim __vbaDerefAry __vbaRecUniToAnsi __vbaUI1ErrVar EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaUI1I4 __vbaStr2Vec __vbaExceptHandler ord711 __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord607 __vbaFPException ord717 __vbaGetOwner3 __vbaStrVarVal __vbaUbound __vbaVarCat ord644 _CIlog __vbaErrorOverflow __vbaFileOpen ord647 __vbaNew2 ord570 __vbaInStr __vbaVar2Vec _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaStrCopy ord681 ord575 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaVarCopy __vbaFpI4 ord616 __vbaRecDestructAnsi ord617 _CIatan __vbaStrMove __vbaAryCopy ord619 __vbaStrVarCopy _allmul __vbaFpCSngR4 __vbaLateIdSt _CItan __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj

Sharing