jaffacakes118_Trojan-Downloader[.]Win32[.]VB[.]ifty[.]e1e322844f11403a2259e030c0df4a6c

General

Target
jaffacakes118_Trojan-Downloader.Win32.VB.ifty.e1e322844f11403a2259e030c0df4a6c
Size 88KB
Sample261014-k4bqbasthv
SHA256 b2aff5eed43718b1967ea7d57298f6c0ad8ad60a5f29e8dba4024b0f960e2650
MD5 e1e322844f11403a2259e030c0df4a6c
SHA1 36d8c8dbfb26db080e3d92c65b712129bbda5d47
SHA512 a6fd28026eee05348d1b8868078d93d48704cba11238d31d0a2215f0aa6c7bbd30b633f5b2326953192b8610aea019e33f96ee8e607e3041290e54789fcc0efb
SSDEEP 1536:3aCk7yEWEqEbETa+MkrY44Ugf2WoLXU6HwjSEY3MkPyEWEqEbET/7:KZ7yL3O/+p4UCsU6HeSx5yL3OU7
TLSH
T18E931A9BB944D1BFE814C9B1985D91E6B542BD314470EC0BB2C23F8B9A3A99375E070F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.VB.ifty.e1e322844f11403a2259e030c0df4a6c

File Explorer

jaffacakes118_Trojan-Downloader.Win32.VB.ifty.e1e322844f11403a2259e030c0df4a6c

.exe 88KB

jaffacakes118_Trojan-Downloader.Win32.VB.ifty.e1e322844f11403a2259e030c0df4a6c

IMPHASH 8c69b7deb7594311b94de77d4ecfc3d1
SHA256 b2aff5eed43718b1967ea7d57298f6c0ad8ad60a5f29e8dba4024b0f960e2650
MD5 e1e322844f11403a2259e030c0df4a6c
SHA1 36d8c8dbfb26db080e3d92c65b712129bbda5d47
SHA512 a6fd28026eee05348d1b8868078d93d48704cba11238d31d0a2215f0aa6c7bbd30b633f5b2326953192b8610aea019e33f96ee8e607e3041290e54789fcc0efb
SSDEEP 1536:3aCk7yEWEqEbETa+MkrY44Ugf2WoLXU6HwjSEY3MkPyEWEqEbET/7:KZ7yL3O/+p4UCsU6HeSx5yL3OU7
TLSH
T18E931A9BB944D1BFE814C9B1985D91E6B542BD314470EC0BB2C23F8B9A3A99375E070F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5820

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaPut3 __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 ord519 __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord667 __vbaVarXor __vbaVarForInit __vbaExitProc __vbaOnError __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i ord598 __vbaBoolVar __vbaBoolVarNull _CIsin ord631 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef ord529 __vbaStrCmp __vbaObjVar DllFunctionCall __vbaVarLateMemSt _adj_fpatan __vbaFixstrConstruct EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord712 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord716 __vbaFPException __vbaStrVarVal __vbaVarCat __vbaI2Var ord537 ord645 _CIlog __vbaFileOpen ord648 __vbaVarLateMemCallLdRf __vbaNew2 _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 ord577 _adj_fdiv_r ord685 ord100 __vbaVarSetVar __vbaI4Var __vbaVarAdd __vbaLateMemCall __vbaVarDup __vbaFreeVarg __vbaStrToAnsi __vbaFpI2 __vbaVarCopy __vbaVarLateMemCallLd ord616 _CIatan __vbaStrMove __vbaCastObj _allmul _CItan __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj ord580 ord581

Sharing