jaffacakes118_Trojan-Dropper[.]Win32[.]Dapato[.]eovf[.]9b1472c4c017ade6ce2549462bc3a2cc

General

Target
jaffacakes118_Trojan-Dropper.Win32.Dapato.eovf.9b1472c4c017ade6ce2549462bc3a2cc
Size 69KB
Sample261009-wdvlaadb78
SHA256 fa8771896be88a96b432ea332e80707e9a2b3b842178b6c863aba9f12d29e30e
MD5 9b1472c4c017ade6ce2549462bc3a2cc
SHA1 325b0ba2c4838e62d688a3f0cc168261ca5e974d
SHA512 704bba9903538a088b23f2bff199bcb150cdee77c42a5f8b60b8e32c4d0415b6d1fd00524ad02522520954ff36bdec124f12b6b2c9c8c923ff9c0ebf22cf54a5
SSDEEP 768:0XQrnHhZ3DjW9uBlHc9pAfESHLs+aYWBC540EWvR1opokd2OXdlzJdLa7mSJOCA6:0XIHhZDjWwr87q3Hx5qIqokZ154dyJ+
TLSH
T12D630913B794EA32D1058DB62B5286E8006ABC320866950BFB843F1E7F37FC6D561767
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Dapato.eovf.9b1472c4c017ade6ce2549462bc3a2cc

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Dapato.eovf.9b1472c4c017ade6ce2549462bc3a2cc

.exe 69KB

jaffacakes118_Trojan-Dropper.Win32.Dapato.eovf.9b1472c4c017ade6ce2549462bc3a2cc

IMPHASH dbfb1ee0822d32f847bc64cbd80b79ee
SHA256 fa8771896be88a96b432ea332e80707e9a2b3b842178b6c863aba9f12d29e30e
MD5 9b1472c4c017ade6ce2549462bc3a2cc
SHA1 325b0ba2c4838e62d688a3f0cc168261ca5e974d
SHA512 704bba9903538a088b23f2bff199bcb150cdee77c42a5f8b60b8e32c4d0415b6d1fd00524ad02522520954ff36bdec124f12b6b2c9c8c923ff9c0ebf22cf54a5
SSDEEP 768:0XQrnHhZ3DjW9uBlHc9pAfESHLs+aYWBC540EWvR1opokd2OXdlzJdLa7mSJOCA6:0XIHhZDjWwr87q3Hx5qIqokZ154dyJ+
TLSH
T12D630913B794EA32D1058DB62B5286E8006ABC320866950BFB843F1E7F37FC6D561767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5916

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

dj105djj

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaVarIndexStore __vbaNextEachVar __vbaFreeObjList ord516 __vbaStrErrVarCopy _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj __vbaVargVarCopy _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaExitProc __vbaObjSet ord595 __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad __vbaVarTstLt __vbaBoolVarNull _CIsin __vbaErase ord631 ord709 __vbaVarZero ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaGet3 __vbaAryConstruct2 __vbaI2I4 __vbaObjVar DllFunctionCall ord563 __vbaCastObjVar __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaLateIdCallLd __vbaRedim EVENT_SINK_Release ord600 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord716 __vbaFPException __vbaInStrVar ord717 __vbaStrVarVal __vbaUbound __vbaVarCat ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVarLateMemCallLdRf __vbaInStr __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord100 __vbaVarSetVar __vbaLateMemCall __vbaVarAdd __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaAryVarVarg __vbaVarLateMemCallLd __vbaFpI4 ord616 ord617 __vbaVarSetObjAddref __vbaLateMemCallLd _CIatan __vbaAryCopy __vbaStrMove ord619 __vbaForEachVar ord650 _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing