jaffacakes118_Trojan-Dropper[.]Win32[.]VB[.]azie[.]3b3d0092b80cd013a47d4a084f5d1c5c

General

Target
jaffacakes118_Trojan-Dropper.Win32.VB.azie.3b3d0092b80cd013a47d4a084f5d1c5c
Size 136KB
Sample261006-tr2kmsax5y
SHA256 39e421061aea015cc48a4c0fcbb0a2c3eb462b7ef11ff571ffbf843b1a2a36e3
MD5 3b3d0092b80cd013a47d4a084f5d1c5c
SHA1 3870297034b7abc41381f0ec7b11158614fdb4f8
SHA512 50a56cebf50c1bff0470cca0593a3a7f0123883086a9965397a9e6c80f9c210957f235815bbc5b45b8722e80bcc07c37d71483ab3508cdef73a4076aad1fa4d2
SSDEEP 3072:ZKudfmqkad57BCUCnH6H+C7+Hf6d/ScCfmqtu:sudfmqkad5lCtnH6H+CyHf6d/Gfmqtu
TLSH
T121D31A236E942011F62605F51D76AAF819317C281911AD07A647FE8F39B69C3F9B233F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.VB.azie.3b3d0092b80cd013a47d4a084f5d1c5c

File Explorer

jaffacakes118_Trojan-Dropper.Win32.VB.azie.3b3d0092b80cd013a47d4a084f5d1c5c

.exe 136KB

jaffacakes118_Trojan-Dropper.Win32.VB.azie.3b3d0092b80cd013a47d4a084f5d1c5c

IMPHASH 62b9605acce3413e139bbe21fba8bb4a
SHA256 39e421061aea015cc48a4c0fcbb0a2c3eb462b7ef11ff571ffbf843b1a2a36e3
MD5 3b3d0092b80cd013a47d4a084f5d1c5c
SHA1 3870297034b7abc41381f0ec7b11158614fdb4f8
SHA512 50a56cebf50c1bff0470cca0593a3a7f0123883086a9965397a9e6c80f9c210957f235815bbc5b45b8722e80bcc07c37d71483ab3508cdef73a4076aad1fa4d2
SSDEEP 3072:ZKudfmqkad57BCUCnH6H+C7+Hf6d/ScCfmqtu:sudfmqkad5lCtnH6H+CyHf6d/Gfmqtu
TLSH
T121D31A236E942011F62605F51D76AAF819317C281911AD07A647FE8F39B69C3F9B233F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6868

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub __vbaVarTstGt _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaAryMove __vbaFreeVar ord694 __vbaStrVarMove __vbaLenBstr __vbaPut3 __vbaEnd __vbaFreeVarList _adj_fdiv_m64 EVENT_SINK_Invoke __vbaRaiseEvent __vbaFreeObjList __vbaStrErrVarCopy _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaError __vbaLsetFixstr __vbaBoolErrVar __vbaSetSystemError __vbaHresultCheckObj __vbaLenBstrB __vbaVargVarCopy _adj_fdiv_m32 Zombie_GetTypeInfo __vbaAryDestruct __vbaCyErrVar ord592 __vbaExitProc ord300 __vbaCyAdd ord595 __vbaObjSet __vbaOnError ord302 _adj_fdiv_m16i ord303 __vbaObjSetAddref _adj_fdivr_m16i ord306 __vbaStrFixstr __vbaForEachCollVar ord308 ord309 __vbaBoolVarNull _CIsin ord631 __vbaVarCmpGt __vbaVargVarMove __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaCyI2 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaCyI4 __vbaDateR8 ord561 __vbaNextEachCollVar __vbaI2I4 DllFunctionCall __vbaVarOr ord563 __vbaFpUI1 __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct Zombie_GetTypeInfoCount __vbaRedim __vbaUI1ErrVar __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 _CIsqrt __vbaObjIs EVENT_SINK_QueryInterface __vbaStrUI1 __vbaExceptHandler __vbaStrToUnicode __vbaR4ErrVar ord606 _adj_fprem _adj_fdivr_m64 __vbaR8ErrVar ord608 __vbaFPException __vbaInStrVar ord717 ord319 __vbaStrVarVal __vbaDateVar __vbaI2Var ord644 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaVarCmpLt __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq __vbaLateMemCall __vbaVarAdd __vbaAryLock ord320 __vbaVarDup __vbaStrToAnsi ord321 __vbaFpI4 ord616 __vbaVarCopy __vbaLateMemCallLd ord617 _CIatan __vbaI2ErrVar __vbaAryCopy __vbaStrMove __vbaCastObj _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj ord581

Sharing