jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4e707f95a2c87eb919e9d4241fb2c0ad

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4e707f95a2c87eb919e9d4241fb2c0ad
Size 104KB
Sample261014-dlpqwsey21
SHA256 4e852798e33c7205d1e68e641d8733422457483c15a2c51a394b9861b36e0461
MD5 4e707f95a2c87eb919e9d4241fb2c0ad
SHA1 dd15dbcb00a2ded15ffe1d078ecfdcd7896f3b93
SHA512 20c8ffff1b64761d5cea835f3017e38e93c99e47c375c4def602caa16864c82af85e63836b84c936a3cb77572dfb809b2f4f1ded414f04ae17eb25e50e5b26f3
SSDEEP 1536:nxNKouGs9UMZHdu1cN+fRzETJLn8nZzknkmrkMEVjd+KH4GGLjlid:xwouGuZHduCNgRzCYzkDr29d+KHLGH
TLSH
T186A384127906802FE150DDF16555C1B9BA2A2E3727E07CABBBC0EF1559B10A778F132B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4e707f95a2c87eb919e9d4241fb2c0ad

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4e707f95a2c87eb919e9d4241fb2c0ad

.exe 104KB

jaffacakes118_HEUR.Trojan.Win32.Generic.4e707f95a2c87eb919e9d4241fb2c0ad

IMPHASH c2c93ae3661d03e9ff98a878f5604107
SHA256 4e852798e33c7205d1e68e641d8733422457483c15a2c51a394b9861b36e0461
MD5 4e707f95a2c87eb919e9d4241fb2c0ad
SHA1 dd15dbcb00a2ded15ffe1d078ecfdcd7896f3b93
SHA512 20c8ffff1b64761d5cea835f3017e38e93c99e47c375c4def602caa16864c82af85e63836b84c936a3cb77572dfb809b2f4f1ded414f04ae17eb25e50e5b26f3
SSDEEP 1536:nxNKouGs9UMZHdu1cN+fRzETJLn8nZzknkmrkMEVjd+KH4GGLjlid:xwouGuZHduCNgRzCYzkDr29d+KHLGH
TLSH
T186A384127906802FE150DDF16555C1B9BA2A2E3727E07CABBBC0EF1559B10A778F132B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11036

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaEnd __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaStrCat __vbaError __vbaRecDestruct __vbaSetSystemError __vbaNameFile __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar ord666 __vbaAryDestruct ord593 ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord598 __vbaFpR4 __vbaStrFixstr __vbaBoolVarNull __vbaFpR8 _CIsin __vbaErase __vbaVarCmpGt ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaCyI2 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaPutOwner3 __vbaObjVar ord561 __vbaI2I4 DllFunctionCall __vbaRedimPreserve __vbaStrR4 __vbaLbound _adj_fpatan __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord600 ord601 __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface ord710 __vbaUI1I4 __vbaExceptHandler ord711 __vbaStrToUnicode ord712 _adj_fprem _adj_fdivr_m64 ord607 ord608 ord716 __vbaFPException ord717 __vbaInStrVar __vbaGetOwner3 __vbaStrVarVal __vbaUbound __vbaVarCat ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec __vbaNew2 ord570 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaAryLock __vbaLateMemCall __vbaVarDup __vbaStrToAnsi __vbaFpI4 __vbaRecDestructAnsi __vbaLateMemCallLd ord617 _CIatan __vbaAryCopy __vbaStrMove ord619 _allmul _CItan __vbaAryUnlock __vbaUI1Var __vbaFPInt _CIexp __vbaStrCy __vbaFreeStr __vbaI4ErrVar __vbaFreeObj ord581

Sharing