jaffacakes118_Trojan-Dropper[.]Win32[.]VB[.]dclv[.]be9774c6047f136fb84bf2d6de5e40e3

General

Target
jaffacakes118_Trojan-Dropper.Win32.VB.dclv.be9774c6047f136fb84bf2d6de5e40e3
Size 36KB
Sample261009-zycgzstycy
SHA256 5c75f13f721550d5042249f18d0f5fe8b3d94cc36765bf7398958fc115888f95
MD5 be9774c6047f136fb84bf2d6de5e40e3
SHA1 cceec434803a1da9ab14ab4b2f5af6bbf48dea99
SHA512 f91e7213cdbd308c3281f35eba62320bb446a3365b417107f02ff223f689519073ebf5f719c1761e3e421b38b777c40dbb1e468a74619c28545d02603e193f58
SSDEEP 384:cDTXK76wj/0LjQuuV1QG3qHNTuli4XxkTSbzcdNDN/XPs:aTXq6tjqbPotP4uTSkvNvP
TLSH
T16FF2950FB3ACB171E14A4ABD2926B6B4555D7C345B88581AE702FA5C3DF4B82F93430B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.VB.dclv.be9774c6047f136fb84bf2d6de5e40e3

File Explorer

jaffacakes118_Trojan-Dropper.Win32.VB.dclv.be9774c6047f136fb84bf2d6de5e40e3

.exe 36KB

jaffacakes118_Trojan-Dropper.Win32.VB.dclv.be9774c6047f136fb84bf2d6de5e40e3

IMPHASH 4512fe6417ba49070457becd58ad1cd1
SHA256 5c75f13f721550d5042249f18d0f5fe8b3d94cc36765bf7398958fc115888f95
MD5 be9774c6047f136fb84bf2d6de5e40e3
SHA1 cceec434803a1da9ab14ab4b2f5af6bbf48dea99
SHA512 f91e7213cdbd308c3281f35eba62320bb446a3365b417107f02ff223f689519073ebf5f719c1761e3e421b38b777c40dbb1e468a74619c28545d02603e193f58
SSDEEP 384:cDTXK76wj/0LjQuuV1QG3qHNTuli4XxkTSbzcdNDN/XPs:aTXq6tjqbPotP4uTSkvNvP
TLSH
T16FF2950FB3ACB171E14A4ABD2926B6B4555D7C345B88581AE702FA5C3DF4B82F93430B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5188

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaGetFxStr3 ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct ord593 _adj_fdiv_m16i _adj_fdivr_m16i ord598 _CIsin __vbaErase ord631 __vbaVarZero ord632 __vbaChkstk ord526 __vbaFileClose __vbaGenerateBoundsError __vbaStrCmp __vbaGet3 __vbaAryConstruct2 DllFunctionCall _adj_fpatan __vbaRedim __vbaRecUniToAnsi _CIsqrt __vbaExceptHandler ord711 __vbaStrToUnicode ord713 _adj_fprem _adj_fdivr_m64 ord607 ord608 __vbaFPException ord717 __vbaStrVarVal __vbaUbound __vbaVarCat __vbaFileSeek ord644 ord537 _CIlog __vbaFileOpen ord570 __vbaR8Str __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaVarCopy ord616 __vbaFpI4 _CIatan __vbaAryCopy __vbaStrMove _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeStr __vbaI4ErrVar __vbaFreeObj ord581

Sharing