jaffacakes118_Trojan[.]Win32[.]Bublik[.]bgje[.]8c44f3bc679e15a39245f83380be96cc

General

Target
jaffacakes118_Trojan.Win32.Bublik.bgje.8c44f3bc679e15a39245f83380be96cc
Size 68KB
Sample261012-y6htaszza1
SHA256 8461645c278445aecec773a01645a939386cd4aaed0922704d69e7210792f6f0
MD5 8c44f3bc679e15a39245f83380be96cc
SHA1 61ea0b35e793ba04370b500745b0fb07e8e8eff2
SHA512 63be2a7d865234c586fac39ae6c475bef8e7a4b1975a368f8ac1c520365f190f807b45e12faee479d30c81a8afbe8612201828292f14e08139d3cb9d4d590492
SSDEEP 768:ZpbcMS1OxGkQVxJEpFPPSw/oavauXCfbYg994+WHZmjzYnB4e2Bq2/D59MYu6Y:FS1tJiFPfQayuyfbdPbSKEBEBqwle6Y
TLSH
T15B63195FF694A373F46A427016578E90B52EBD3529410902F749BA3E3EF3AC2991331B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Bublik.bgje.8c44f3bc679e15a39245f83380be96cc

File Explorer

jaffacakes118_Trojan.Win32.Bublik.bgje.8c44f3bc679e15a39245f83380be96cc

.exe 68KB

jaffacakes118_Trojan.Win32.Bublik.bgje.8c44f3bc679e15a39245f83380be96cc

IMPHASH da9abf93a423625eadb084e784bfc6e0
SHA256 8461645c278445aecec773a01645a939386cd4aaed0922704d69e7210792f6f0
MD5 8c44f3bc679e15a39245f83380be96cc
SHA1 61ea0b35e793ba04370b500745b0fb07e8e8eff2
SHA512 63be2a7d865234c586fac39ae6c475bef8e7a4b1975a368f8ac1c520365f190f807b45e12faee479d30c81a8afbe8612201828292f14e08139d3cb9d4d590492
SSDEEP 768:ZpbcMS1OxGkQVxJEpFPPSw/oavauXCfbYg994+WHZmjzYnB4e2Bq2/D59MYu6Y:FS1tJiFPfQayuyfbdPbSKEBEBqwle6Y
TLSH
T15B63195FF694A373F46A427016578E90B52EBD3529410902F749BA3E3EF3AC2991331B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5108

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 ord516 _adj_fprem1 __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit _adj_fdiv_m16i _adj_fdivr_m16i _CIsin __vbaErase __vbaVarZero ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaAryConstruct2 __vbaVarTstEq DllFunctionCall ord670 _adj_fpatan __vbaRedim EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaVarMul __vbaExceptHandler ord711 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException __vbaUbound __vbaStrVarVal __vbaVarCat ord644 _CIlog __vbaFileOpen __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord578 ord100 __vbaI4Var __vbaAryLock __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaVarCopy ord617 _CIatan __vbaStrMove __vbaAryCopy __vbaStrVarCopy _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing