jaffacakes118_Trojan-Downloader[.]Win32[.]VB[.]mh[.]8cca59953ab3cabd6942b046c3eedf7f

General

Target
jaffacakes118_Trojan-Downloader.Win32.VB.mh.8cca59953ab3cabd6942b046c3eedf7f
Size 140KB
Sample261006-rt2bjs1sds
SHA256 de46e07319b881b4fde969652c22b4444157b3142f8e291cb28929508506e2ec
MD5 8cca59953ab3cabd6942b046c3eedf7f
SHA1 7d8e2e1f0eaba9ee677922221d6cd30bd6c4420e
SHA512 a058c1787b46305e6d537392b7added09b365d8472e0bd597a05089abd42316c3657140bc001575bf3b98312029f15f37ccd6f103b17adff3ae67f8c7d00d27d
SSDEEP 1536:U2rCvVIZakUJEPW8mhIiNjNpxupo7WdW7EIpEmbQ62aRsi3tU1EJWd:jeyZ3jzeI2W07l2v6jRsidUGU
TLSH
T1BFE30913BB55A01AF567C9B01C35A494792B7C671EA0DD0B3281BB0E9AB1683BDF071F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.VB.mh.8cca59953ab3cabd6942b046c3eedf7f

File Explorer

jaffacakes118_Trojan-Downloader.Win32.VB.mh.8cca59953ab3cabd6942b046c3eedf7f

.exe 140KB

jaffacakes118_Trojan-Downloader.Win32.VB.mh.8cca59953ab3cabd6942b046c3eedf7f

IMPHASH e1550693e8e7420ffb466e86e10dd9ce
SHA256 de46e07319b881b4fde969652c22b4444157b3142f8e291cb28929508506e2ec
MD5 8cca59953ab3cabd6942b046c3eedf7f
SHA1 7d8e2e1f0eaba9ee677922221d6cd30bd6c4420e
SHA512 a058c1787b46305e6d537392b7added09b365d8472e0bd597a05089abd42316c3657140bc001575bf3b98312029f15f37ccd6f103b17adff3ae67f8c7d00d27d
SSDEEP 1536:U2rCvVIZakUJEPW8mhIiNjNpxupo7WdW7EIpEmbQ62aRsi3tU1EJWd:jeyZ3jzeI2W07l2v6jRsidUGU
TLSH
T1BFE30913BB55A01AF567C9B01C35A494792B7C671EA0DD0B3281BB0E9AB1683BDF071F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8980

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaLateIdCall __vbaPut3 __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 __vbaStrErrVarCopy _adj_fprem1 ord518 __vbaResume __vbaStrCat ord660 __vbaSetSystemError ord662 __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct ord593 __vbaExitProc ord300 ord594 ord301 ord595 __vbaOnError __vbaObjSet ord302 _adj_fdiv_m16i ord303 __vbaObjSetAddref _adj_fdivr_m16i ord598 ord306 __vbaForEachCollVar ord520 ord307 ord308 ord309 __vbaBoolVarNull _CIsin ord709 __vbaVarCmpGt ord632 __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaExitEachColl __vbaStrCmp __vbaAryConstruct2 __vbaPutOwner3 __vbaVarTstEq __vbaI2I4 __vbaNextEachCollVar DllFunctionCall __vbaVarOr __vbaFpUI1 _adj_fpatan __vbaLateIdCallLd __vbaStrR8 EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord714 ord608 __vbaFPException __vbaInStrVar ord717 __vbaStrVarVal __vbaUbound __vbaVarCat __vbaDateVar __vbaI2Var __vbaFileSeek _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec ord648 ord570 __vbaInStr __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord578 ord685 ord100 __vbaVarTstNe __vbaI4Var ord610 __vbaVarAdd ord612 __vbaStrToAnsi __vbaVarDup __vbaFpI2 ord616 __vbaVarCopy __vbaFpI4 ord617 _CIatan __vbaCastObj __vbaStrMove ord619 ord650 _allmul __vbaLenVarB __vbaLateIdSt _CItan ord546 _CIexp __vbaFreeObj __vbaFreeStr

Sharing