jaffacakes118_Trojan-Downloader[.]Win32[.]VB[.]ifkj[.]bfabe594adcc8a187e8f94ea251030e1

General

Target
jaffacakes118_Trojan-Downloader.Win32.VB.ifkj.bfabe594adcc8a187e8f94ea251030e1
Size 300KB
Sample261012-yb29fset5v
SHA256 1a1610285101ab69816cb1308b9ac8cd48903cea72f25e839a53f9b09ec78050
MD5 bfabe594adcc8a187e8f94ea251030e1
SHA1 26840ebdf4abad2edaa4953e9bcac0ac0a93bd3e
SHA512 5336631917a47791bb2eda15d3247a5f4d34e0c49e413b0f62d1a537d6534a4f66734665dd7fdc1e8e65e409a2c66a5a46b642c44f456ff059f7361b4f734b27
SSDEEP 6144:YKBQtgjfmLiwO9qNYgjfmLiwO9qNKc8BT4mCrW1CXwFk3P:3utgrN9qNYgrN9qNnoMLAPE
TLSH
T1E364AE3AFB648009F0D5007C681B1A5779685E386994193BFB826F4F39BA7E6B0F4313
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.VB.ifkj.bfabe594adcc8a187e8f94ea251030e1

File Explorer

jaffacakes118_Trojan-Downloader.Win32.VB.ifkj.bfabe594adcc8a187e8f94ea251030e1

.exe 300KB

jaffacakes118_Trojan-Downloader.Win32.VB.ifkj.bfabe594adcc8a187e8f94ea251030e1

IMPHASH f785f19a6f428831f753cd2432fa51fd
SHA256 1a1610285101ab69816cb1308b9ac8cd48903cea72f25e839a53f9b09ec78050
MD5 bfabe594adcc8a187e8f94ea251030e1
SHA1 26840ebdf4abad2edaa4953e9bcac0ac0a93bd3e
SHA512 5336631917a47791bb2eda15d3247a5f4d34e0c49e413b0f62d1a537d6534a4f66734665dd7fdc1e8e65e409a2c66a5a46b642c44f456ff059f7361b4f734b27
SSDEEP 6144:YKBQtgjfmLiwO9qNYgjfmLiwO9qNKc8BT4mCrW1CXwFk3P:3utgrN9qNYgrN9qNnoMLAPE
TLSH
T1E364AE3AFB648009F0D5007C681B1A5779685E386994193BFB826F4F39BA7E6B0F4313
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5908

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaPut3 __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 ord518 __vbaVarCmpNe __vbaStrCat __vbaLsetFixstr ord660 __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaVarXor __vbaVarForInit __vbaExitProc ord593 ord594 __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaBoolVarNull __vbaVarTstLt _CIsin __vbaErase ord631 ord525 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaI2I4 __vbaObjVar DllFunctionCall __vbaVarOr __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim EVENT_SINK_Release __vbaNew ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaStr2Vec __vbaExceptHandler __vbaStrToUnicode ord712 _adj_fprem _adj_fdivr_m64 ord608 ord716 __vbaFPException __vbaInStrVar __vbaUbound __vbaStrVarVal __vbaVarCat ord535 __vbaI2Var ord536 ord537 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr __vbaNew2 _adj_fdiv_m32i ord572 _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaVarCmpEq ord610 __vbaAryLock __vbaVarAdd __vbaLateMemCall __vbaStrComp __vbaStrToAnsi __vbaVarDup ord612 __vbaFpI2 ord616 __vbaFpI4 __vbaVarCopy ord617 __vbaLateMemCallLd _CIatan __vbaCastObj __vbaStrMove ord619 _allmul _CItan __vbaAryUnlock __vbaFPInt __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr ord581

Sharing