jaffacakes118_SMSOCX308[.]ocx

General

Target
jaffacakes118_SMSOCX308.ocx
Size 248KB
Sample261017-rxgrbahs6s
SHA256 86f88bb95c2d0272a12ae106f316436db2e8019a14b2791b1ae910b696f49c0b
MD5 862090fd22be7827e1f84b7a63b42ae6
SHA1 5c81a5e040dfdac2e44d5ab11b239cd5e2b9ef51
SHA512 82f92229d482714bb3843efbbbd8fd8654fd8daf3126d10de1c71a7377d6e467c8271e840453064c0b45a0093e6e838bc38103259275a7c9977ef144bb6016d7
SSDEEP 3072:7eDaaK5yzbMe9xpMG9o0W3WL7/C2FW0eJM4luMLIAdzhN3ime6lWiZQx4K6:7euVBeJMLGLrS02MMPNhNXlNy6
TLSH
T1E044A426A392E03EF5864074761BB3AA586C2C7A0644A01FF781DF5C34BDCEEA476747
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_SMSOCX308.ocx

File Explorer

jaffacakes118_SMSOCX308.ocx

.dll 248KB

jaffacakes118_SMSOCX308.ocx

IMPHASH 0548e0f33133d47501bc1846651e8aea
SHA256 86f88bb95c2d0272a12ae106f316436db2e8019a14b2791b1ae910b696f49c0b
MD5 862090fd22be7827e1f84b7a63b42ae6
SHA1 5c81a5e040dfdac2e44d5ab11b239cd5e2b9ef51
SHA512 82f92229d482714bb3843efbbbd8fd8654fd8daf3126d10de1c71a7377d6e467c8271e840453064c0b45a0093e6e838bc38103259275a7c9977ef144bb6016d7
SSDEEP 3072:7eDaaK5yzbMe9xpMG9o0W3WL7/C2FW0eJM4luMLIAdzhN3ime6lWiZQx4K6:7euVBeJMLGLrS02MMPNhNXlNy6
TLSH
T1E044A426A392E03EF5864074761BB3AA586C2C7A0644A01FF781DF5C34BDCEEA476747
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12048

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub __vbaR8FixI4 __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree ord693 __vbaAryMove __vbaFreeVar __vbaAptOffset __vbaStrVarMove __vbaLateIdCall __vbaLenBstr ord695 __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent __vbaNextEachVar __vbaFreeObjList ord516 __vbaStrErrVarCopy _adj_fprem1 ord518 __vbaVarCmpNe __vbaStrCat ord629 __vbaError ord660 __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar __vbaVargVarCopy _adj_fdiv_m32 __vbaAryDestruct __vbaVarCmpGe ord593 __vbaExitProc __vbaVarForInit ord301 __vbaObjSet __vbaOnError ord595 _adj_fdiv_m16i ord303 __vbaObjSetAddref _adj_fdivr_m16i ord598 ord520 __vbaBoolVar __vbaStrFixstr ord307 __vbaFPFix ord309 __vbaBoolVarNull __vbaVarTstLt _CIsin __vbaErase ord525 __vbaVarCmpGt ord632 __vbaVargVarMove __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 ord561 __vbaI2I4 DllFunctionCall __vbaVarOr _adj_fpatan __vbaR4Var __vbaFixstrConstruct ord569 __vbaLateIdCallLd __vbaStrR8 __vbaRedim EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt __vbaLateIdCallSt __vbaVarAnd EVENT_SINK_QueryInterface __vbaUI1I4 __vbaVarMul ord710 __vbaExceptHandler ord711 __vbaStrToUnicode ord712 ord606 __vbaR4ErrVar _adj_fprem _adj_fdivr_m64 ord607 __vbaVarDiv ord608 __vbaFPException __vbaInStrVar __vbaGetOwner3 __vbaStrVarVal __vbaVarCat ord535 __vbaLsetFixstrFree __vbaI2Var ord644 ord537 __vbaExitEachVar _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaR8Str ord570 __vbaInStr ord571 __vbaVarInt _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 __vbaI4Str __vbaFreeStrList __vbaVarCmpLt _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 __vbaVarTstNe ord101 ord102 __vbaI4Var ord103 __vbaVarCmpEq ord104 ord105 __vbaVarAdd __vbaAryLock __vbaStrToAnsi __vbaVarDup ord612 ord613 __vbaFpI2 ord616 __vbaVarCopy __vbaVarTstGe __vbaFpI4 __vbaR8IntI2 ord617 _CIatan __vbaStrMove __vbaI2ErrVar __vbaForEachVar __vbaStrVarCopy ord619 ord650 _allmul __vbaLateIdSt ord544 _CItan ord546 __vbaAryUnlock __vbaUI1Var __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing