jaffacakes118_Trojan-Downloader[.]Win32[.]VB[.]abvc[.]4dcb562610ab5238d1832e529552ee3c

General

Target
jaffacakes118_Trojan-Downloader.Win32.VB.abvc.4dcb562610ab5238d1832e529552ee3c
Size 56KB
Sample261006-rf4vhszzhx
SHA256 d394c68d3f21dd5c2cc6047f9515064e9ddc50fdb819f7058e0060bb192f2971
MD5 4dcb562610ab5238d1832e529552ee3c
SHA1 6006636fa8c66dfcb97a694dee837839e535593e
SHA512 bc83ad717e9b7b0a2ca7a58708f910f5ac01be0011355ee4c98bdc2fd03d2f8995dd640cde609712c58e129aa5543ab407495defe2923460ec5f23b7a3edcbb3
SSDEEP 1536:OERr/W0B7q4nDK99QGbYuwgsMwshVHzvco+C:9r/W0Bq4nDK99QGcuDrws1R
TLSH
T17A43A7237A6908A5F159223135F231516D56BC321E01FE7BBF01AE9CEC752837EA4A1F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.VB.abvc.4dcb562610ab5238d1832e529552ee3c

File Explorer

jaffacakes118_Trojan-Downloader.Win32.VB.abvc.4dcb562610ab5238d1832e529552ee3c

.exe 56KB

jaffacakes118_Trojan-Downloader.Win32.VB.abvc.4dcb562610ab5238d1832e529552ee3c

IMPHASH 7372becee3cd56f2e35bd88f859440e3
SHA256 d394c68d3f21dd5c2cc6047f9515064e9ddc50fdb819f7058e0060bb192f2971
MD5 4dcb562610ab5238d1832e529552ee3c
SHA1 6006636fa8c66dfcb97a694dee837839e535593e
SHA512 bc83ad717e9b7b0a2ca7a58708f910f5ac01be0011355ee4c98bdc2fd03d2f8995dd640cde609712c58e129aa5543ab407495defe2923460ec5f23b7a3edcbb3
SSDEEP 1536:OERr/W0B7q4nDK99QGbYuwgsMwshVHzvco+C:9r/W0Bq4nDK99QGcuDrws1R
TLSH
T17A43A7237A6908A5F159223135F231516D56BC321E01FE7BBF01AE9CEC752837EA4A1F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6044

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaLineInputStr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList __vbaStrErrVarCopy _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaStrCat ord553 __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord666 __vbaVarIndexLoadRefLock __vbaExitProc __vbaOnError __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i __vbaVarIndexLoad __vbaStrFixstr ord520 __vbaRefVarAry _CIsin __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaStrCmp ord529 __vbaVarTstEq __vbaObjVar __vbaI2I4 DllFunctionCall ord670 _adj_fpatan __vbaLateIdCallLd __vbaRecUniToAnsi EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 ord712 __vbaPrintFile __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord607 ord608 ord716 ord531 __vbaFPException __vbaInStrVar ord717 __vbaStrVarVal __vbaUbound __vbaVarCat __vbaI2Var ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaInStr ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList ord576 _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaVarSetVar __vbaLateMemCall __vbaStrToAnsi __vbaVarDup __vbaVarCopy __vbaVarLateMemCallLd ord616 ord617 __vbaVarSetObjAddref _CIatan __vbaStrMove ord619 ord542 ord543 _allmul ord544 __vbaLenVarB ord545 _CItan ord546 ord547 __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr

Sharing