jaffacakes118_Trojan-Dropper[.]Win32[.]VB[.]ckvo[.]1769131fde18c5c4c865b18acccedd82

General

Target
jaffacakes118_Trojan-Dropper.Win32.VB.ckvo.1769131fde18c5c4c865b18acccedd82
Size 52KB
Sample261006-tsk92s1zbt
SHA256 01f37de69744313ef262c91428945806c42d305d0b0125d47cd35f93cafd3e69
MD5 1769131fde18c5c4c865b18acccedd82
SHA1 2b1a31ac6509a28f51acea09fcfbe9441a377df0
SHA512 334e99f908aaf8b4f2d4094cb0b6f3aa95326fb18b852d27b7c6c79fd0da96337f7b084d3fdd405729342c186cb27fd4999317936dfc9b295641b363620e86af
SSDEEP 768:/os0uumn21BDMSsRoUsc1igilkmix0aTtvOaoZpxpxT6/uSVVfLfymQA:wynAM89EigilxixTtvIjMVViA
TLSH
T19C33E823B64C2062F26345B10DA3F6B7696B7C311912DD0B2246FB094971993BAF633F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.VB.ckvo.1769131fde18c5c4c865b18acccedd82

File Explorer

jaffacakes118_Trojan-Dropper.Win32.VB.ckvo.1769131fde18c5c4c865b18acccedd82

.exe 52KB

jaffacakes118_Trojan-Dropper.Win32.VB.ckvo.1769131fde18c5c4c865b18acccedd82

IMPHASH d43b34b8c283b0f46a27f374a8ec701c
SHA256 01f37de69744313ef262c91428945806c42d305d0b0125d47cd35f93cafd3e69
MD5 1769131fde18c5c4c865b18acccedd82
SHA1 2b1a31ac6509a28f51acea09fcfbe9441a377df0
SHA512 334e99f908aaf8b4f2d4094cb0b6f3aa95326fb18b852d27b7c6c79fd0da96337f7b084d3fdd405729342c186cb27fd4999317936dfc9b295641b363620e86af
SSDEEP 768:/os0uumn21BDMSsRoUsc1igilkmix0aTtvOaoZpxpxT6/uSVVfLfymQA:wynAM89EigilxixTtvIjMVViA
TLSH
T19C33E823B64C2062F26345B10DA3F6B7696B7C311912DD0B2246FB094971993BAF633F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5708

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 ord621 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad _CIsin __vbaErase ord631 __vbaVarZero ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall _adj_fpatan __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord601 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 ord712 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaFPException __vbaUbound __vbaStrVarVal __vbaVarCat ord644 ord537 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr __vbaNew2 ord570 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaFpI4 __vbaVarCopy __vbaRecDestructAnsi _CIatan __vbaUI1Str __vbaStrMove ord619 _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaI4ErrVar __vbaFreeStr ord581

Sharing