jaffacakes118_Trojan-Downloader[.]Win32[.]VB[.]bkdo[.]87c4c5b79e2ba8dd263e052ef68aaa2a

General

Target
jaffacakes118_Trojan-Downloader.Win32.VB.bkdo.87c4c5b79e2ba8dd263e052ef68aaa2a
Size 56KB
Sample261006-rmrtjafc26
SHA256 5a9da36e1bce092505d6b4c98eca5d0959ffdcc39c2eda3b0bb5ef7b400074e1
MD5 87c4c5b79e2ba8dd263e052ef68aaa2a
SHA1 d19223dcce6300321753228f20717c94c70d0e3a
SHA512 c9f43fbfcc262cc3c06858e26e806b4fd80ecceca8d1559c5bcadd6e1cb7c2f658b48ca027443954062d1b0c6f31b45f2d7e9bd30116b5600b22f743de129cb6
SSDEEP 768:u1YzYOp9dYwcICm7s3Aog2Ar8I4E3qxIS1by/i9UlVgw3p:iYz7X29Aog2Ar8I33qmS1b2Cw
TLSH
T127432215BA06C057E0484AF42952C6C22A797D376383692FFBC45B5D1EB078B3DE0B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.VB.bkdo.87c4c5b79e2ba8dd263e052ef68aaa2a

File Explorer

jaffacakes118_Trojan-Downloader.Win32.VB.bkdo.87c4c5b79e2ba8dd263e052ef68aaa2a

.exe 56KB

jaffacakes118_Trojan-Downloader.Win32.VB.bkdo.87c4c5b79e2ba8dd263e052ef68aaa2a

IMPHASH 319b06b498bd85324cbadd9c5dd03095
SHA256 5a9da36e1bce092505d6b4c98eca5d0959ffdcc39c2eda3b0bb5ef7b400074e1
MD5 87c4c5b79e2ba8dd263e052ef68aaa2a
SHA1 d19223dcce6300321753228f20717c94c70d0e3a
SHA512 c9f43fbfcc262cc3c06858e26e806b4fd80ecceca8d1559c5bcadd6e1cb7c2f658b48ca027443954062d1b0c6f31b45f2d7e9bd30116b5600b22f743de129cb6
SSDEEP 768:u1YzYOp9dYwcICm7s3Aog2Ar8I4E3qxIS1by/i9UlVgw3p:iYz7X29Aog2Ar8I33qmS1b2Cw
TLSH
T127432215BA06C057E0484AF42952C6C22A797D376383692FFBC45B5D1EB078B3DE0B2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaVarTstGt ord690 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaAryMove __vbaFreeVar __vbaLineInputStr __vbaStrVarMove __vbaLateIdCall __vbaLenBstr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList __vbaStrErrVarCopy _adj_fprem1 ord518 __vbaResume __vbaVarCmpNe __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit __vbaExitProc ord595 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord520 __vbaBoolVar __vbaBoolVarNull _CIsin ord631 ord709 ord525 ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaStrCmp __vbaPutOwner3 __vbaVarTstEq __vbaDateR8 __vbaI2I4 __vbaObjVar DllFunctionCall __vbaVarLateMemSt _adj_fpatan __vbaFixstrConstruct __vbaLateIdCallLd EVENT_SINK_Release _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaInputFile __vbaPrintFile __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord607 ord608 __vbaFPException __vbaInStrVar ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaCheckType ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 __vbaVarLateMemCallLdRf __vbaVar2Vec __vbaInStr __vbaNew2 ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarSetVar __vbaI4Var ord689 ord610 __vbaLateMemCall __vbaVarAdd __vbaVarDup __vbaStrToAnsi ord613 __vbaCheckTypeVar __vbaFpI4 __vbaVarLateMemCallLd __vbaLateMemCallLd ord617 _CIatan __vbaAryCopy __vbaStrMove ord619 _allmul _CItan __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing