jaffacakes118_Trojan[.]Win32[.]VBKrypt[.]woox[.]29a37c3bd31f355f78507cd386cd2cd6

General

Target
jaffacakes118_Trojan.Win32.VBKrypt.woox.29a37c3bd31f355f78507cd386cd2cd6
Size 32KB
Sample261014-mt968sttdw
SHA256 4809e29c86d2d1016d0476b33e1a65bb54f137a8766d46bd19bc803f6c93821f
MD5 29a37c3bd31f355f78507cd386cd2cd6
SHA1 ec30707e05a5074e6dd58fe88893206c9a377f43
SHA512 2913c476142378bce8e5ca91c533b2bda04d328489f5fd68579dc384bf53abab5696678ad5fd77fb2dcb9d3b58547450e7a067fc99af191903c6a0abc550759a
SSDEEP 384:lZ9ClQyqRfjYd0MCSyUX0FoeiIFZQyPcGyTJhf3jmH7hLULiI36uDZ4/BbH8:/9CWy6kGqITQyaTHf36bhLULis+a
TLSH
T135E26427FB0C54A9F58D86B91A12969B68113D316BC1AC0FE747BB4C38B0A83B5F0717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.VBKrypt.woox.29a37c3bd31f355f78507cd386cd2cd6

File Explorer

jaffacakes118_Trojan.Win32.VBKrypt.woox.29a37c3bd31f355f78507cd386cd2cd6

.exe 32KB

jaffacakes118_Trojan.Win32.VBKrypt.woox.29a37c3bd31f355f78507cd386cd2cd6

IMPHASH 3aca7b6766d5ee37a1aadcd3bd09c54f
SHA256 4809e29c86d2d1016d0476b33e1a65bb54f137a8766d46bd19bc803f6c93821f
MD5 29a37c3bd31f355f78507cd386cd2cd6
SHA1 ec30707e05a5074e6dd58fe88893206c9a377f43
SHA512 2913c476142378bce8e5ca91c533b2bda04d328489f5fd68579dc384bf53abab5696678ad5fd77fb2dcb9d3b58547450e7a067fc99af191903c6a0abc550759a
SSDEEP 384:lZ9ClQyqRfjYd0MCSyUX0FoeiIFZQyPcGyTJhf3jmH7hLULiI36uDZ4/BbH8:/9CWy6kGqITQyaTHf36bhLULis+a
TLSH
T135E26427FB0C54A9F58D86B91A12969B68113D316BC1AC0FE747BB4C38B0A83B5F0717
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5092

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i _CIsin __vbaErase ord632 __vbaVarZero __vbaChkstk ord526 __vbaFileClose __vbaGenerateBoundsError __vbaGet3 __vbaAryConstruct2 DllFunctionCall _adj_fpatan __vbaRedim __vbaRecUniToAnsi __vbaUI1I2 _CIsqrt __vbaExceptHandler ord711 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord570 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaVarMod _CIatan __vbaStrMove __vbaAryCopy _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeStr

Sharing