jaffacakes118_Trojan-Dropper[.]Win32[.]VB[.]dddt[.]c79807033e54f5a54707e97bf47faebc

General

Target
jaffacakes118_Trojan-Dropper.Win32.VB.dddt.c79807033e54f5a54707e97bf47faebc
Size 56KB
Sample261009-zypsbaex2s
SHA256 b3bb8cdc7d5f1b31dfe4c5e68b91049b6c53cbe2a68c702827d3881e0d2b6874
MD5 c79807033e54f5a54707e97bf47faebc
SHA1 f0e45b3fa2de93f9f978203b834e9bfe4036e496
SHA512 61a0f484a05e052d30ac347e2ca6067b6a2b4e42eb2ebcac3d659684f0b1286ce6095304d49a272d642db82c131b5867a89c060dd8d7ec2315a8e6be0ded2c1a
SSDEEP 768:NzaNvZV4F7F1XZsNsWaFtW3E5YxbAYRiaw9GH:Nz2B67F9ZslGtabA78H
TLSH
T1EA43501BE11822E1E6854A311876D1A93FB3BC35DECB8D5B36C777190C78942AF5322E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.VB.dddt.c79807033e54f5a54707e97bf47faebc

File Explorer

jaffacakes118_Trojan-Dropper.Win32.VB.dddt.c79807033e54f5a54707e97bf47faebc

.exe 56KB

jaffacakes118_Trojan-Dropper.Win32.VB.dddt.c79807033e54f5a54707e97bf47faebc

IMPHASH 84dc1f2ea3dfe233958959fc8e3aa44a
SHA256 b3bb8cdc7d5f1b31dfe4c5e68b91049b6c53cbe2a68c702827d3881e0d2b6874
MD5 c79807033e54f5a54707e97bf47faebc
SHA1 f0e45b3fa2de93f9f978203b834e9bfe4036e496
SHA512 61a0f484a05e052d30ac347e2ca6067b6a2b4e42eb2ebcac3d659684f0b1286ce6095304d49a272d642db82c131b5867a89c060dd8d7ec2315a8e6be0ded2c1a
SSDEEP 768:NzaNvZV4F7F1XZsNsWaFtW3E5YxbAYRiaw9GH:Nz2B67F9ZslGtabA78H
TLSH
T1EA43501BE11822E1E6854A311876D1A93FB3BC35DECB8D5B36C777190C78942AF5322E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9342

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaFreeVarList __vbaEnd _adj_fdiv_m64 ord621 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i __vbaVarIndexLoad ord598 __vbaCyStr _CIsin __vbaErase ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall _adj_fpatan __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord601 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 ord712 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaI2Str __vbaFPException ord717 __vbaStrVarVal _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord570 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaVarAdd __vbaStrToAnsi __vbaFpI4 __vbaVarCopy __vbaRecDestructAnsi _CIatan __vbaStrMove _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeStr

Sharing