jaffacakes118_UDS[.]DangerousObject[.]Multi[.]Generic[.]b603df7ddafab73943fe195648db4048

General

Target
jaffacakes118_UDS.DangerousObject.Multi.Generic.b603df7ddafab73943fe195648db4048
Size 348KB
Sample261018-s8vb8afz7v
SHA256 c91e1cae3a116a19eedce1951add2530b5ce923c4e52ad916157d5d6add03a48
MD5 b603df7ddafab73943fe195648db4048
SHA1 bdc3400b115d18587b623ebce5d2af4c7b8ee335
SHA512 6fafc9081b693f6f2b6f798b33f66b35d11932c4925a9b9f4986f6806169a25a4f1df73607ef337c1b26cdc6277ddbe66e3619b5d9a1e1fdccd0cd39b8fdac82
SSDEEP 6144:H1y79MRx0/rR8CH8ioIfKHCH8iU79MRx0/rR:Vy6Re6CeCg6Re
TLSH
T1B1749D237F189513EAAA41B258F6C1F93B707D240A905D073186FF6F2C716A365AB31E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_UDS.DangerousObject.Multi.Generic.b603df7ddafab73943fe195648db4048

File Explorer

jaffacakes118_UDS.DangerousObject.Multi.Generic.b603df7ddafab73943fe195648db4048

.exe 348KB

jaffacakes118_UDS.DangerousObject.Multi.Generic.b603df7ddafab73943fe195648db4048

IMPHASH c6d8a5826ad273976e58b5af37631d11
SHA256 c91e1cae3a116a19eedce1951add2530b5ce923c4e52ad916157d5d6add03a48
MD5 b603df7ddafab73943fe195648db4048
SHA1 bdc3400b115d18587b623ebce5d2af4c7b8ee335
SHA512 6fafc9081b693f6f2b6f798b33f66b35d11932c4925a9b9f4986f6806169a25a4f1df73607ef337c1b26cdc6277ddbe66e3619b5d9a1e1fdccd0cd39b8fdac82
SSDEEP 6144:H1y79MRx0/rR8CH8ioIfKHCH8iU79MRx0/rR:Vy6Re6CeCg6Re
TLSH
T1B1749D237F189513EAAA41B258F6C1F93B707D240A905D073186FF6F2C716A365AB31E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6744

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaR8FixI4 __vbaVarSub _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 EVENT_SINK_Invoke __vbaRaiseEvent __vbaFreeObjList ord517 _adj_fprem1 __vbaRecAnsiToUni ord518 ord519 __vbaStrCat __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj _adj_fdiv_m32 ord666 Zombie_GetTypeInfo __vbaAryDestruct __vbaExitProc __vbaObjSet ord595 __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord520 __vbaStrFixstr __vbaBoolVarNull _CIsin __vbaErase ord631 __vbaVarZero ord525 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError __vbaStrCmp ord529 __vbaPutOwner3 __vbaAryConstruct2 __vbaVarTstEq __vbaI2I4 ord561 __vbaObjVar __vbaVarLikeVar DllFunctionCall __vbaVarLateMemSt __vbaFpUI1 __vbaRedimPreserve _adj_fpatan Zombie_GetTypeInfoCount __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode __vbaPrintFile ord606 _adj_fprem _adj_fdivr_m64 __vbaR8ErrVar ord607 __vbaI2Str ord608 ord716 __vbaFPException ord717 __vbaInStrVar ord319 __vbaGetOwner3 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var __vbaStopExe ord537 ord644 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 __vbaVar2Vec __vbaNew2 __vbaInStr ord570 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList ord576 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord578 ord685 ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var __vbaVarLateMemStAd __vbaVarAdd __vbaAryLock __vbaLateMemCall ord320 __vbaStrComp __vbaStrToAnsi __vbaVarDup ord321 __vbaFpI2 __vbaFpI4 __vbaVarLateMemCallLd __vbaVarCopy ord616 __vbaVarSetObjAddref ord617 _CIatan ord618 __vbaCastObj __vbaStrMove __vbaStrVarCopy _allmul __vbaLenVarB __vbaVarLateMemCallSt _CItan __vbaAryUnlock _CIexp __vbaRecAssign __vbaFreeObj __vbaFreeStr

Sharing