jaffacakes118_Trojan-Dropper[.]Win32[.]Agent[.]bbzm[.]7e825ce57fb36ab77d56557c801ccc94

General

Target
jaffacakes118_Trojan-Dropper.Win32.Agent.bbzm.7e825ce57fb36ab77d56557c801ccc94
Size 88KB
Sample261006-sp7hfacy2j
SHA256 ef12c22af452659ff52be8d2fbb73e439f5620b7deab414b54a24b5e9fd17af7
MD5 7e825ce57fb36ab77d56557c801ccc94
SHA1 87612a8f662d6fcd40e1f89dba4a7709688c8ece
SHA512 a2eb74fabdba1270905b4872572230ac3b2fff9edab99b6216812377742967bf6d75d90864b49bd1469024b046b5ba3c14026630d9c26992cad706961794e94e
SSDEEP 1536:RL5A8gx9hgXMdD7nFvtzI9u53pKWPEnFL1:RNLgx9hgcdD7HI9u53pEZ
TLSH
T13393D613AE9B801FF2548AB01A7190D9297D3D333992AD1FFB89BA0D0D7154765E0B3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Agent.bbzm.7e825ce57fb36ab77d56557c801ccc94

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Agent.bbzm.7e825ce57fb36ab77d56557c801ccc94

.exe 88KB

jaffacakes118_Trojan-Dropper.Win32.Agent.bbzm.7e825ce57fb36ab77d56557c801ccc94

IMPHASH 8a08dc3feb86ed914762e5b435b3104c
SHA256 ef12c22af452659ff52be8d2fbb73e439f5620b7deab414b54a24b5e9fd17af7
MD5 7e825ce57fb36ab77d56557c801ccc94
SHA1 87612a8f662d6fcd40e1f89dba4a7709688c8ece
SHA512 a2eb74fabdba1270905b4872572230ac3b2fff9edab99b6216812377742967bf6d75d90864b49bd1469024b046b5ba3c14026630d9c26992cad706961794e94e
SSDEEP 1536:RL5A8gx9hgXMdD7nFvtzI9u53pKWPEnFL1:RNLgx9hgcdD7HI9u53pEZ
TLSH
T13393D613AE9B801FF2548AB01A7190D9297D3D333992AD1FFB89BA0D0D7154765E0B3B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub ord690 _CIcos _adj_fptan __vbaHresultCheck __vbaStrI4 __vbaVarMove __vbaFreeVar __vbaAryMove __vbaLineInputStr __vbaLenBstr __vbaStrVarMove __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 ord518 ord519 ord626 __vbaForEachCollAd __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord666 __vbaAryVar __vbaAryDestruct __vbaExitProc ord593 ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord520 _CIsin ord525 ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaExitEachColl ord529 __vbaPutOwner3 __vbaVarTstEq __vbaAryConstruct2 __vbaObjVar DllFunctionCall ord564 __vbaRedimPreserve __vbaStrR4 _adj_fpatan __vbaFixstrConstruct __vbaRedim EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler ord711 ord712 __vbaStrToUnicode __vbaPrintFile ord606 _adj_fprem _adj_fdivr_m64 ord608 ord716 __vbaFPException __vbaInStrVar ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord537 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaR8Str __vbaInStr __vbaNew2 ord648 __vbaVar2Vec ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList ord576 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var __vbaVarCmpEq __vbaVarAdd __vbaVarDup __vbaStrToAnsi ord616 __vbaVarLateMemCallLd __vbaFpI4 __vbaLateMemCallLd ord617 _CIatan __vbaCastObj ord618 __vbaStrMove __vbaAryCopy __vbaStrVarCopy ord619 _allmul _CItan __vbaNextEachCollAd __vbaFPInt _CIexp __vbaFreeStr __vbaFreeObj

Sharing