jaffacakes118_Trojan[.]Win32[.]Agent[.]umrb[.]832503c5290bfccd733d5f7e9ebdecf6

General

Target
jaffacakes118_Trojan.Win32.Agent.umrb.832503c5290bfccd733d5f7e9ebdecf6
Size 256KB
Sample261015-3wx8fsey4n
SHA256 0bbe74600d6ec6bc82fa427ff5b29f4886e195a0a518cfa94118e0717e6fad9c
MD5 832503c5290bfccd733d5f7e9ebdecf6
SHA1 b5b97318b2fbf8aa39efa161ed4b522b514efe12
SHA512 e2faba92e9484abfa18afa753c3edd5f4ae913d769bb2d5079099de688873472e34e8fb8bcc98f7260d9356ffcfd16d797ea6cfeda8c781fada0c49d2ab5a959
SSDEEP 3072:9cuA2amCvGxiaFLut+MycuA2amCvGxiaFLut+Mn:1Cvai9t+JCvai9t+g
TLSH
T1AD440933FA54942BF18D80B0287A99B6A1176D7406025D47718EEF5D1E33B13B9B3B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Agent.umrb.832503c5290bfccd733d5f7e9ebdecf6

File Explorer

jaffacakes118_Trojan.Win32.Agent.umrb.832503c5290bfccd733d5f7e9ebdecf6

.exe 256KB

jaffacakes118_Trojan.Win32.Agent.umrb.832503c5290bfccd733d5f7e9ebdecf6

IMPHASH 4abf8d1560b7ae57501b9a0978a41376
SHA256 0bbe74600d6ec6bc82fa427ff5b29f4886e195a0a518cfa94118e0717e6fad9c
MD5 832503c5290bfccd733d5f7e9ebdecf6
SHA1 b5b97318b2fbf8aa39efa161ed4b522b514efe12
SHA512 e2faba92e9484abfa18afa753c3edd5f4ae913d769bb2d5079099de688873472e34e8fb8bcc98f7260d9356ffcfd16d797ea6cfeda8c781fada0c49d2ab5a959
SSDEEP 3072:9cuA2amCvGxiaFLut+MycuA2amCvGxiaFLut+Mn:1Cvai9t+JCvai9t+g
TLSH
T1AD440933FA54942BF18D80B0287A99B6A1176D7406025D47718EEF5D1E33B13B9B3B2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 __vbaR8ForNextCheck _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLineInputStr __vbaLenBstr __vbaStrVarMove __vbaPut3 __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc ord593 ord594 __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaRefVarAry _CIsin ord631 __vbaErase ord525 __vbaVarZero ord632 __vbaChkstk ord526 __vbaFileClose rtcByteValueBstr __vbaGenerateBoundsError ord529 __vbaStrCmp __vbaGet3 __vbaAryConstruct2 __vbaR4Str __vbaObjVar ord561 __vbaI2I4 DllFunctionCall __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaLateIdCallLd __vbaStrR8 __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaStr2Vec __vbaExceptHandler __vbaStrToUnicode ord712 _adj_fprem _adj_fdivr_m64 __vbaLateIdStAd ord608 ord716 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord537 ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 __vbaR8Str __vbaInStr __vbaNew2 __vbaVar2Vec ord571 _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord685 ord578 ord100 __vbaVarSetVar __vbaI4Var __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaVerifyVarObj __vbaFpI4 __vbaVarLateMemCallLd __vbaLateMemCallLd _CIatan __vbaUI1Str __vbaAryCopy __vbaStrMove __vbaR8IntI4 _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj ord581

Sharing