jaffacakes118_Trojan-Dropper[.]Win32[.]Dapato[.]eovf[.]b60ee99ac0baffd12e0e75f55c6e5388

General

Target
jaffacakes118_Trojan-Dropper.Win32.Dapato.eovf.b60ee99ac0baffd12e0e75f55c6e5388
Size 72KB
Sample261006-tpem4adt2p
SHA256 bc201062fd05004d6bcdd1d485aaf5280e8c4e7f58a30fdd37eb6e9e2c595dd1
MD5 b60ee99ac0baffd12e0e75f55c6e5388
SHA1 93dc5267abf6d0639a869d5ff635b88692f45e62
SHA512 92194461d788daada37e4909bf417b79d2d9051b2d2a073d67c1331ce1b138677ccb1c0eca9b1cd4c687886a55d1cca617da98f84efb79920248f59e40e97324
SSDEEP 768:rlXQrnHhZ3DjW2uBlHc9pAfESHLs+aYWBC540EWvR1opokd2OXdlzJdLa7mSJOCW:rlXIHhZDjWzr87q3Hx5qIqokZ154dT0
TLSH
T1A673F713B7D4EA32D1094AF63B2186A400AABD3108A2950BFB443A1D7F76FC7D571B67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Dapato.eovf.b60ee99ac0baffd12e0e75f55c6e5388

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Dapato.eovf.b60ee99ac0baffd12e0e75f55c6e5388

.exe 72KB

jaffacakes118_Trojan-Dropper.Win32.Dapato.eovf.b60ee99ac0baffd12e0e75f55c6e5388

IMPHASH 32c03e091a7672ca18b044f227ed4732
SHA256 bc201062fd05004d6bcdd1d485aaf5280e8c4e7f58a30fdd37eb6e9e2c595dd1
MD5 b60ee99ac0baffd12e0e75f55c6e5388
SHA1 93dc5267abf6d0639a869d5ff635b88692f45e62
SHA512 92194461d788daada37e4909bf417b79d2d9051b2d2a073d67c1331ce1b138677ccb1c0eca9b1cd4c687886a55d1cca617da98f84efb79920248f59e40e97324
SSDEEP 768:rlXQrnHhZ3DjW2uBlHc9pAfESHLs+aYWBC540EWvR1opokd2OXdlzJdLa7mSJOCW:rlXIHhZDjWzr87q3Hx5qIqokZ154dT0
TLSH
T1A673F713B7D4EA32D1094AF63B2186A400AABD3108A2950BFB443A1D7F76FC7D571B67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5916

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaVarIndexStore __vbaNextEachVar __vbaFreeObjList ord516 __vbaStrErrVarCopy _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj __vbaVargVarCopy _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaExitProc __vbaObjSet ord595 __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad __vbaVarTstLt __vbaBoolVarNull _CIsin __vbaErase ord631 ord709 __vbaVarZero ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaGet3 __vbaAryConstruct2 __vbaI2I4 __vbaObjVar DllFunctionCall ord563 __vbaCastObjVar __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaLateIdCallLd __vbaRedim EVENT_SINK_Release ord600 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord716 __vbaFPException __vbaInStrVar ord717 __vbaStrVarVal __vbaUbound __vbaVarCat ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVarLateMemCallLdRf __vbaInStr __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord100 __vbaVarSetVar __vbaLateMemCall __vbaVarAdd __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaAryVarVarg __vbaVarLateMemCallLd __vbaFpI4 ord616 ord617 __vbaVarSetObjAddref __vbaLateMemCallLd _CIatan __vbaAryCopy __vbaStrMove ord619 __vbaForEachVar ord650 _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing