jaffacakes118_Trojan-Dropper[.]Win32[.]VB[.]azcv[.]9613c9766735ad3c6c666dde906f4668

General

Target
jaffacakes118_Trojan-Dropper.Win32.VB.azcv.9613c9766735ad3c6c666dde906f4668
Size 228KB
Sample261009-zkvfmsev21
SHA256 423a5d462fc95a6a5435082e44af58848b1f8e63fc907a1340aab1d46ca58bdc
MD5 9613c9766735ad3c6c666dde906f4668
SHA1 508070c4b2f35e9fb074ae9eb6462fced1da503a
SHA512 a4e08e1d2f348e990a7705371f18f45d40ce4b90c8d4ad023c6df7f67eb84cb0521025d61c00848d71400740beb919fd63dd3310c539f69e1a2fbfaed8a1e8b0
SSDEEP 3072:cVLT8kbZHd6IVy1hPFatEcu7Bz3c+pJTa3BqQRiRkAINDK5B+6jmXUsEI5XFEDXc:cVLT8kV9jCPZs+pg3BqQ4IlVUU75o
TLSH
T10734CF03FFB89196D8564DBE6903D69766163C352410A992BF983A0FB5F23C234A7F13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.VB.azcv.9613c9766735ad3c6c666dde906f4668

File Explorer

jaffacakes118_Trojan-Dropper.Win32.VB.azcv.9613c9766735ad3c6c666dde906f4668

.exe 228KB

jaffacakes118_Trojan-Dropper.Win32.VB.azcv.9613c9766735ad3c6c666dde906f4668

IMPHASH 9ef7e98221bf40c83d60ba1959b51968
SHA256 423a5d462fc95a6a5435082e44af58848b1f8e63fc907a1340aab1d46ca58bdc
MD5 9613c9766735ad3c6c666dde906f4668
SHA1 508070c4b2f35e9fb074ae9eb6462fced1da503a
SHA512 a4e08e1d2f348e990a7705371f18f45d40ce4b90c8d4ad023c6df7f67eb84cb0521025d61c00848d71400740beb919fd63dd3310c539f69e1a2fbfaed8a1e8b0
SSDEEP 3072:cVLT8kbZHd6IVy1hPFatEcu7Bz3c+pJTa3BqQRiRkAINDK5B+6jmXUsEI5XFEDXc:cVLT8kV9jCPZs+pg3BqQ4IlVUU75o
TLSH
T10734CF03FFB89196D8564DBE6903D69766163C352410A992BF983A0FB5F23C234A7F13
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5764

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaStrVarMove ord588 __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList __vbaVarFix _adj_fprem1 __vbaVarCmpNe __vbaStrCat ord660 __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 ord666 __vbaAryDestruct __vbaVarForInit __vbaOnError __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i ord520 __vbaBoolVarNull __vbaFpR8 __vbaVarTstLt _CIsin ord632 __vbaVargVarMove __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaGet3 __vbaVarTstEq __vbaAryConstruct2 __vbaPutOwner3 ord561 __vbaPrintObj DllFunctionCall __vbaVarOr _adj_fpatan __vbaR4Var EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaVarMul __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaVarDiv ord530 __vbaVarCmpLe __vbaFPException __vbaStrVarVal __vbaGetOwner3 __vbaUbound __vbaVarCat __vbaGetOwner4 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord570 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList __vbaVarCmpLt _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaVarAdd __vbaVarDup __vbaStrToAnsi ord613 __vbaFpI2 __vbaVarCopy __vbaVarTstGe _CIatan __vbaStrMove __vbaR8IntI4 ord543 _allmul ord544 _CItan ord546 ord547 __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing