jaffacakes118_Trojan-Downloader[.]Win32[.]VB[.]tbq[.]a7d5e5c7a16e46409d083126dc37e585

General

Target
jaffacakes118_Trojan-Downloader.Win32.VB.tbq.a7d5e5c7a16e46409d083126dc37e585
Size 488KB
Sample261006-rwe64act7p
SHA256 34d3c1171dbac2b4b2d4b69b6befcc8891afd89bfe41b3ca70b0740ad189d37d
MD5 a7d5e5c7a16e46409d083126dc37e585
SHA1 0ab52aafc305850508bfa137b15e96e8ace3121e
SHA512 253edc229bd1fac0d029146e81c46835dbc4e361b64a91263adb2fc2a767df1e64e02ae9017261fe21b4ae537964794e2b82c78ef10a6c84a2c5f972a902f58f
SSDEEP 12288:E543agDd1cmf3yWg1Han8A72NnA5uzbP/Hd2/Qhj9:EyruzRJ
TLSH
T183B4B516AD106134FC6E58749C046D57DC4A1B320E84BD2AFBC057E7B8B9397AAF460F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.VB.tbq.a7d5e5c7a16e46409d083126dc37e585

File Explorer

jaffacakes118_Trojan-Downloader.Win32.VB.tbq.a7d5e5c7a16e46409d083126dc37e585

.exe 488KB

jaffacakes118_Trojan-Downloader.Win32.VB.tbq.a7d5e5c7a16e46409d083126dc37e585

IMPHASH d947888fb013deba293651c770ba204b
SHA256 34d3c1171dbac2b4b2d4b69b6befcc8891afd89bfe41b3ca70b0740ad189d37d
MD5 a7d5e5c7a16e46409d083126dc37e585
SHA1 0ab52aafc305850508bfa137b15e96e8ace3121e
SHA512 253edc229bd1fac0d029146e81c46835dbc4e361b64a91263adb2fc2a767df1e64e02ae9017261fe21b4ae537964794e2b82c78ef10a6c84a2c5f972a902f58f
SSDEEP 12288:E543agDd1cmf3yWg1Han8A72NnA5uzbP/Hd2/Qhj9:EyruzRJ
TLSH
T183B4B516AD106134FC6E58749C046D57DC4A1B320E84BD2AFBC057E7B8B9397AAF460F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub __vbaVarTstGt ord690 __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaFreeVar __vbaLineInputStr __vbaStrVarMove __vbaLateIdCall __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 EVENT_SINK_Invoke __vbaNextEachVar __vbaFreeObjList __vbaVarIndexLoadRef _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaCopyBytes __vbaStrCat __vbaVarCmpNe __vbaBoolErrVar ord553 __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryVar ord666 Zombie_GetTypeInfo __vbaAryDestruct ord591 __vbaVarPow __vbaVarForInit ord593 ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord520 __vbaFpR8 __vbaBoolVarNull _CIsin ord709 __vbaVarCmpGt __vbaVarZero ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 ord529 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaObjVar __vbaI2I4 DllFunctionCall __vbaVarLateMemSt __vbaVarOr __vbaCastObjVar __vbaStrR4 _adj_fpatan __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaRedim __vbaStrR8 __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaStrUI1 __vbaVarMul __vbaExceptHandler ord711 ord712 __vbaPrintFile __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaI2Str ord608 ord716 __vbaFPException __vbaInStrVar ord319 __vbaGetOwner3 __vbaStrVarVal __vbaUbound __vbaVarCat ord535 __vbaI2Var ord645 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 ord570 __vbaNew2 __vbaInStr __vbaVarLateMemCallLdRf __vbaR8Str __vbaVarInt ord571 _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaVarSetObj __vbaStrCopy __vbaFreeStrList __vbaVarNot _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var ord689 __vbaVarCmpEq __vbaVarAdd __vbaAryLock __vbaLateMemCall ord320 __vbaVarDup __vbaStrToAnsi ord321 __vbaFpI2 __vbaVarCopy __vbaVarLateMemCallLd __vbaR8IntI2 ord617 __vbaLateMemCallLd _CIatan ord618 __vbaStrMove __vbaAryCopy __vbaCastObj __vbaForEachVar __vbaR8IntI4 _allmul __vbaLateIdSt ord545 _CItan ord546 __vbaAryUnlock __vbaFPInt __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj ord580 ord581

Sharing