jaffacakes118_Trojan-Dropper[.]Win32[.]Injector[.]ioav[.]a9823c140e205788261efe4b22b8ad79

General

Target
jaffacakes118_Trojan-Dropper.Win32.Injector.ioav.a9823c140e205788261efe4b22b8ad79
Size 1.1MB
Sample261011-1xcxsshg37
SHA256 be87fbf1acd36687bdc35873efbca1169fa4a1400aa05ef914ab4dc220c47428
MD5 a9823c140e205788261efe4b22b8ad79
SHA1 78c249a90229a268ca3a86f32bc8a3b3802bd0f7
SHA512 24fb2cadb4cb3bd6ac6b893a6ee6eb1b8899e0708a567864a74e2c0225f3025a6da64fdafa81cc3826e6b59f6fa9577786d5228d38b570caf6ada51a35db6add
SSDEEP 3072:nHvNEXXXXXXXXXXXkP92Ajuujy7IW/HazxBfFUJVgQirKhXzINBP0iAFHruu0K7K:HCbx3mtR7zAZ
TLSH
T12635463E79BE673BD6B5E6BA8FC84523F490E5273102AC2990D753528706A433EC613D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Injector.ioav.a9823c140e205788261efe4b22b8ad79

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Injector.ioav.a9823c140e205788261efe4b22b8ad79

.exe 1.1MB

jaffacakes118_Trojan-Dropper.Win32.Injector.ioav.a9823c140e205788261efe4b22b8ad79

IMPHASH 8de67c6c5e10c04977125acc96b41a76
SHA256 be87fbf1acd36687bdc35873efbca1169fa4a1400aa05ef914ab4dc220c47428
MD5 a9823c140e205788261efe4b22b8ad79
SHA1 78c249a90229a268ca3a86f32bc8a3b3802bd0f7
SHA512 24fb2cadb4cb3bd6ac6b893a6ee6eb1b8899e0708a567864a74e2c0225f3025a6da64fdafa81cc3826e6b59f6fa9577786d5228d38b570caf6ada51a35db6add
SSDEEP 3072:nHvNEXXXXXXXXXXXkP92Ajuujy7IW/HazxBfFUJVgQirKhXzINBP0iAFHruu0K7K:HCbx3mtR7zAZ
TLSH
T12635463E79BE673BD6B5E6BA8FC84523F490E5273102AC2990D753528706A433EC613D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5780

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaNextEachAry _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaGosubReturn __vbaLenBstr __vbaStrVarMove ord696 __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni ord628 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj __vbaLenBstrB _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i ord598 __vbaCyStr _CIsin __vbaErase ord631 __vbaVarZero ord632 __vbaChkstk __vbaGosubFree EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 DllFunctionCall _adj_fpatan __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode ord712 ord606 ord713 _adj_fprem _adj_fdivr_m64 __vbaGosub __vbaI2Str ord608 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var ord644 ord537 _CIlog __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaStrCopy ord681 __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaForEachAry __vbaVarAdd __vbaAryLock __vbaStrToAnsi __vbaAryVarVarg __vbaVarMod __vbaVarCopy __vbaFpI4 _CIatan __vbaUI1Str __vbaAryCopy __vbaStrMove _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeStr ord581

Sharing