jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]3b7089df11bfd53580ba1df7b94802d7

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.3b7089df11bfd53580ba1df7b94802d7
Size 184KB
Sample261014-b9qlzsty5l
SHA256 904ed06dce0ce2f85819a5e77112cb931cdeafaa694453fe7da74e9af3056381
MD5 3b7089df11bfd53580ba1df7b94802d7
SHA1 0cddd8e03a404148d7f9fa1a6146330b82b45cdc
SHA512 9bef0f00129cf960da753b28f38118575c0c474e63cee462a3683267ff1a9f3057fd1afd8d566683bd96b4d1b5b4212f5619fc526fcca935b9737ea3c4f10693
SSDEEP 3072:C1cSgnCEMtin3NbYP6GE85akOl6yByFtik0S:vSMCEMtYn0Ttzik0
TLSH
T12404CE46A7C5EC6BE98DC9F0178606E154E8593930B0FB9377E3AB766B30481D078D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.3b7089df11bfd53580ba1df7b94802d7

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.3b7089df11bfd53580ba1df7b94802d7

.exe 184KB

jaffacakes118_HEUR.Trojan.Win32.Generic.3b7089df11bfd53580ba1df7b94802d7

IMPHASH d8fd6b820bc8905f3d1483ee13543b65
SHA256 904ed06dce0ce2f85819a5e77112cb931cdeafaa694453fe7da74e9af3056381
MD5 3b7089df11bfd53580ba1df7b94802d7
SHA1 0cddd8e03a404148d7f9fa1a6146330b82b45cdc
SHA512 9bef0f00129cf960da753b28f38118575c0c474e63cee462a3683267ff1a9f3057fd1afd8d566683bd96b4d1b5b4212f5619fc526fcca935b9737ea3c4f10693
SSDEEP 3072:C1cSgnCEMtin3NbYP6GE85akOl6yByFtik0S:vSMCEMtYn0Ttzik0
TLSH
T12404CE46A7C5EC6BE98DC9F0178606E154E8593930B0FB9377E3AB766B30481D078D2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10404

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent ord516 _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc __vbaVarForInit __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad _CIsin __vbaErase ord631 __vbaVarZero __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaI2I4 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaStr2Vec __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaFPException __vbaUbound __vbaVarCat ord644 ord537 _CIlog __vbaErrorOverflow __vbaNew2 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaI4Str __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaAryLock __vbaVarCopy __vbaFpI4 ord617 _CIatan __vbaUI1Str __vbaStrMove ord619 __vbaR8IntI4 __vbaStrVarCopy _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaMidStmtBstr __vbaFreeObj __vbaI4ErrVar __vbaFreeStr ord581

Sharing