jaffacakes118_Trojan-Downloader[.]Win32[.]VB[.]hkxy[.]4500913358dc05450d80daa657965bbd

General

Target
jaffacakes118_Trojan-Downloader.Win32.VB.hkxy.4500913358dc05450d80daa657965bbd
Size 40KB
Sample261006-rrfbaszs8n
SHA256 a0932e02d4c85c26feaaa37b48cad1be5560378f5e3028a6d63a0ee8768dae3d
MD5 4500913358dc05450d80daa657965bbd
SHA1 a17c2f718bd38924e71d6ad92ab09135e94dc27b
SHA512 4a7058e65f9e59d5fff32f0c461e212004073915c869f573e681be09cf52ca930b67e69c4a1f4a30a954e25acb3de8f627428f7597ea1ca50b9be22a6fef97a2
SSDEEP 768:zRJGtud3slNOYM50qcipnswSFp3euAM6K:z7GYd3Zpc2pq6K
TLSH
T1AF038317FA2D582AF28A46B1183156AA69263C3014649D0FFB56FF2D1DF25C3B9F031B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.VB.hkxy.4500913358dc05450d80daa657965bbd

File Explorer

jaffacakes118_Trojan-Downloader.Win32.VB.hkxy.4500913358dc05450d80daa657965bbd

.exe 40KB

jaffacakes118_Trojan-Downloader.Win32.VB.hkxy.4500913358dc05450d80daa657965bbd

IMPHASH d4a975a580e13f8f39703e3a6c527abf
SHA256 a0932e02d4c85c26feaaa37b48cad1be5560378f5e3028a6d63a0ee8768dae3d
MD5 4500913358dc05450d80daa657965bbd
SHA1 a17c2f718bd38924e71d6ad92ab09135e94dc27b
SHA512 4a7058e65f9e59d5fff32f0c461e212004073915c869f573e681be09cf52ca930b67e69c4a1f4a30a954e25acb3de8f627428f7597ea1ca50b9be22a6fef97a2
SSDEEP 768:zRJGtud3slNOYM50qcipnswSFp3euAM6K:z7GYd3Zpc2pq6K
TLSH
T1AF038317FA2D582AF28A46B1183156AA69263C3014649D0FFB56FF2D1DF25C3B9F031B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaLateIdCall __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList _adj_fprem1 __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar ord667 __vbaAryDestruct ord593 __vbaExitProc __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaFpR4 _CIsin __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaPutOwner3 __vbaI2I4 DllFunctionCall __vbaLbound _adj_fpatan __vbaRedim EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord714 ord608 ord531 __vbaFPException __vbaStrVarVal __vbaUbound __vbaVarCat _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec ord648 __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord578 ord100 __vbaAryLock __vbaStrToAnsi __vbaLateMemCallLd _CIatan __vbaStrMove __vbaAryCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj

Sharing