jaffacakes118_Trojan-Downloader[.]Win32[.]VB[.]yj[.]485b3c664f0f4c99505795a76aa7a65f

General

Target
jaffacakes118_Trojan-Downloader.Win32.VB.yj.485b3c664f0f4c99505795a76aa7a65f
Size 32KB
Sample261006-rxgfjsct8p
SHA256 94cc75a7c9d0a07bfb7f0ad1c0c8bb9337a98bbc4c10e3e3906939f5d93ccb30
MD5 485b3c664f0f4c99505795a76aa7a65f
SHA1 68a82fdbfe900622299b5f482eaf2f5629a32ebd
SHA512 3dc896e9208467a83d9f4131635d61f869c7ed36ecb197d1e622efca18b9f77a6711fded4bd834055fee6589ed0b420c0ea6f2da90206665317e64dee4946d10
SSDEEP 384:3sUYjtf5qi3vsM7dIiXJ6p3qcYZwIzG9ZgcpbD94jX:3s5jtf533EM7dfMp2qZgcpHyj
TLSH
T1FAE27423BA49517AFA48C6F11D3152A6B8167D390BD0EC97768ABF1C2935093B9F070F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.VB.yj.485b3c664f0f4c99505795a76aa7a65f

File Explorer

jaffacakes118_Trojan-Downloader.Win32.VB.yj.485b3c664f0f4c99505795a76aa7a65f

.exe 32KB

jaffacakes118_Trojan-Downloader.Win32.VB.yj.485b3c664f0f4c99505795a76aa7a65f

IMPHASH f5010c662f1a3020c425975f545fd5bd
SHA256 94cc75a7c9d0a07bfb7f0ad1c0c8bb9337a98bbc4c10e3e3906939f5d93ccb30
MD5 485b3c664f0f4c99505795a76aa7a65f
SHA1 68a82fdbfe900622299b5f482eaf2f5629a32ebd
SHA512 3dc896e9208467a83d9f4131635d61f869c7ed36ecb197d1e622efca18b9f77a6711fded4bd834055fee6589ed0b420c0ea6f2da90206665317e64dee4946d10
SSDEEP 384:3sUYjtf5qi3vsM7dIiXJ6p3qcYZwIzG9ZgcpbD94jX:3s5jtf533EM7dfMp2qZgcpHyj
TLSH
T1FAE27423BA49517AFA48C6F11D3152A6B8167D390BD0EC97768ABF1C2935093B9F070F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6012

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub ord690 _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaPut4 __vbaFreeObjList ord516 ord517 _adj_fprem1 ord518 __vbaRecAnsiToUni __vbaVarCmpNe __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord593 ord594 __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i ord598 __vbaVarIndexLoad __vbaStrFixstr __vbaRefVarAry _CIsin ord631 ord632 __vbaChkstk __vbaFileClose __vbaStrCmp __vbaI2I4 DllFunctionCall _adj_fpatan __vbaFixstrConstruct __vbaRecUniToAnsi ord600 _CIsqrt __vbaVarMul __vbaExceptHandler ord711 __vbaPrintFile __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException __vbaInStrVar __vbaUbound __vbaVarCat __vbaI2Var ord537 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord648 __vbaInStr __vbaVarInt _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var ord689 __vbaVarAdd __vbaVarDup __vbaStrToAnsi ord616 _CIatan __vbaStrMove ord619 _allmul _CItan _CIexp __vbaFreeStr __vbaFreeObj

Sharing