jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]39af8e0e910173343df362cf868e316d

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.39af8e0e910173343df362cf868e316d
Size 100KB
Sample261014-b1kpdaea82
SHA256 864cc12d07c14b284d867ef0a47a7c39dbdd11c7e7e7308744383cdad4bc2fa9
MD5 39af8e0e910173343df362cf868e316d
SHA1 102a3c16af9e3404c9efcefe3ba6595a1d188037
SHA512 0cf9ad6ced7ed39ee09343e5614388f870b042070092e71a33088d53dd1db36ad17d1fcf33a86d417de8b9e02a3766a1b894e87b67f0d86bc043b96b23e9eed0
SSDEEP 1536:E8JjF/18a2cbU9VrbYx7lCu6cz8niTA9ncm1atx+8vR8jd:tGBhbYzz84A91atI8J
TLSH
T164A394167506C02BE150CDF1656581B9B92A2F372BE07CABBBC0EF1915B10A778F172B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.39af8e0e910173343df362cf868e316d

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.39af8e0e910173343df362cf868e316d

.exe 100KB

jaffacakes118_HEUR.Trojan.Win32.Generic.39af8e0e910173343df362cf868e316d

IMPHASH d34794632e7848082dd5ccdab267022a
SHA256 864cc12d07c14b284d867ef0a47a7c39dbdd11c7e7e7308744383cdad4bc2fa9
MD5 39af8e0e910173343df362cf868e316d
SHA1 102a3c16af9e3404c9efcefe3ba6595a1d188037
SHA512 0cf9ad6ced7ed39ee09343e5614388f870b042070092e71a33088d53dd1db36ad17d1fcf33a86d417de8b9e02a3766a1b894e87b67f0d86bc043b96b23e9eed0
SSDEEP 1536:E8JjF/18a2cbU9VrbYx7lCu6cz8niTA9ncm1atx+8vR8jd:tGBhbYzz84A91atI8J
TLSH
T164A394167506C02BE150CDF1656581B9B92A2F372BE07CABBBC0EF1915B10A778F172B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11028

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaEnd __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaStrCat __vbaError __vbaRecDestruct __vbaSetSystemError __vbaNameFile __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar ord666 __vbaAryDestruct ord593 ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord598 __vbaFpR4 __vbaStrFixstr __vbaBoolVarNull __vbaFpR8 _CIsin __vbaErase __vbaVarCmpGt ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaCyI2 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaPutOwner3 __vbaObjVar ord561 __vbaI2I4 DllFunctionCall __vbaRedimPreserve __vbaStrR4 __vbaLbound _adj_fpatan __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord600 ord601 __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface ord710 __vbaUI1I4 __vbaExceptHandler ord711 __vbaStrToUnicode ord712 _adj_fprem _adj_fdivr_m64 ord607 ord608 ord716 __vbaFPException ord717 __vbaInStrVar __vbaGetOwner3 __vbaStrVarVal __vbaUbound __vbaVarCat ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec __vbaNew2 ord570 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList ord576 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaAryLock __vbaLateMemCall __vbaVarDup __vbaStrToAnsi __vbaFpI4 __vbaRecDestructAnsi __vbaLateMemCallLd ord617 _CIatan __vbaAryCopy __vbaStrMove ord619 _allmul _CItan __vbaAryUnlock __vbaUI1Var __vbaFPInt _CIexp __vbaStrCy __vbaFreeStr __vbaI4ErrVar __vbaFreeObj ord581

Sharing