jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4deb697f12bdd966bc0f011fd46d38de

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4deb697f12bdd966bc0f011fd46d38de
Size 660KB
Sample261014-djsprsfv2k
SHA256 dce4b34477d65b6ae6773f40e923fd9afe5222bf6569d1536c87986887cb20d2
MD5 4deb697f12bdd966bc0f011fd46d38de
SHA1 2215aa587b7ce99e2876c505a25464220f0cec0e
SHA512 67fbd9f5334d242aacf81c8af78279783ae6a9e2d9c1ddf12551032eeb22db7207e07eb3eb57374a6ba61877039ed472540ebac7b9796b73d282a6f5c7650efe
SSDEEP 6144:Z99G2kI6TMykJkabSvNs12kI6TMykJkyklykbI6TzITI0RfsCcVR:NH2sAwv0VcV
TLSH
T186E4AD517B94CDA2C96447758CE7C3646B38BC905F024B0B73A8BB3F3D726913E9225A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4deb697f12bdd966bc0f011fd46d38de

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4deb697f12bdd966bc0f011fd46d38de

.exe 660KB

jaffacakes118_HEUR.Trojan.Win32.Generic.4deb697f12bdd966bc0f011fd46d38de

IMPHASH b3c95b5c62bd6bc8a32ca85cbe654d84
SHA256 dce4b34477d65b6ae6773f40e923fd9afe5222bf6569d1536c87986887cb20d2
MD5 4deb697f12bdd966bc0f011fd46d38de
SHA1 2215aa587b7ce99e2876c505a25464220f0cec0e
SHA512 67fbd9f5334d242aacf81c8af78279783ae6a9e2d9c1ddf12551032eeb22db7207e07eb3eb57374a6ba61877039ed472540ebac7b9796b73d282a6f5c7650efe
SSDEEP 6144:Z99G2kI6TMykJkabSvNs12kI6TMykJkyklykbI6TzITI0RfsCcVR:NH2sAwv0VcV
TLSH
T186E4AD517B94CDA2C96447758CE7C3646B38BC905F024B0B73A8BB3F3D726913E9225A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6160

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaI2Sgn _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 ord517 _adj_fprem1 __vbaRecAnsiToUni ord519 __vbaCopyBytes __vbaStrCat __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaVarForInit __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaFpR4 __vbaStrFixstr __vbaVarTstLt _CIsin __vbaErase ord631 ord525 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaPutOwner3 __vbaI2I4 __vbaObjVar DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaLateIdCallLd __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaVarDiv ord531 ord716 __vbaFPException __vbaInStrVar __vbaStrVarVal __vbaUbound ord535 __vbaI2Var ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec ord648 __vbaR8Str __vbaInStr __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarSetVar __vbaI4Var __vbaLateMemCall __vbaStrToAnsi __vbaVarDup ord616 __vbaFpI4 __vbaRecDestructAnsi _CIatan ord618 __vbaCastObj __vbaStrMove __vbaStrVarCopy _allmul __vbaLateIdSt _CItan __vbaVarForNext _CIexp __vbaMidStmtBstr __vbaFreeObj __vbaFreeStr

Sharing