jaffacakes118_Trojan[.]Win32[.]Cossta[.]aklc[.]3b0362adb1ffb06090c135baa85609f6

General

Target
jaffacakes118_Trojan.Win32.Cossta.aklc.3b0362adb1ffb06090c135baa85609f6
Size 152KB
Sample261018-2qlrssh15q
SHA256 0580be86eea07db5910216e2249ee77d0f62d5d983d8f78f2bf5bbee1695a151
MD5 3b0362adb1ffb06090c135baa85609f6
SHA1 5106987d8a3a34fa3cf65e7c49e33430740ef5c3
SHA512 b79aae67815c02c290943b72f7714e012d9722f070b75b6639fcbb23b04130a0bacb5e82c466047d8ef776b4c1faf8b738d109c07e2a89ddc57c5b060ff46c15
SSDEEP 3072:j4z6CK351jxoIGCgIjxPNtWEWOvnTBbTLCmYv6l:j4GjrGCgcNrWEWOvnTBbTLCmk6
TLSH
T129E30823D6987021F1730A701D76267928AA7C350412ED0FB38AEF5929759D7EAF132F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Cossta.aklc.3b0362adb1ffb06090c135baa85609f6

File Explorer

jaffacakes118_Trojan.Win32.Cossta.aklc.3b0362adb1ffb06090c135baa85609f6

.exe 152KB

jaffacakes118_Trojan.Win32.Cossta.aklc.3b0362adb1ffb06090c135baa85609f6

IMPHASH 6c35f53a0cd1bf757620ca311dbd3464
SHA256 0580be86eea07db5910216e2249ee77d0f62d5d983d8f78f2bf5bbee1695a151
MD5 3b0362adb1ffb06090c135baa85609f6
SHA1 5106987d8a3a34fa3cf65e7c49e33430740ef5c3
SHA512 b79aae67815c02c290943b72f7714e012d9722f070b75b6639fcbb23b04130a0bacb5e82c466047d8ef776b4c1faf8b738d109c07e2a89ddc57c5b060ff46c15
SSDEEP 3072:j4z6CK351jxoIGCgIjxPNtWEWOvnTBbTLCmYv6l:j4GjrGCgcNrWEWOvnTBbTLCmk6
TLSH
T129E30823D6987021F1730A701D76267928AA7C350412ED0FB38AEF5929759D7EAF132F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarTstGt __vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree ord694 __vbaAryMove __vbaFreeVar __vbaLateIdCall __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 EVENT_SINK_Invoke __vbaRaiseEvent __vbaFreeObjList __vbaStrErrVarCopy ord517 __vbaVarIndexLoadRef _adj_fprem1 __vbaRecAnsiToUni ord518 __vbaStrCat __vbaError __vbaBoolErrVar ord660 __vbaLsetFixstr __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj __vbaNameFile __vbaVargVarCopy __vbaLenVar _adj_fdiv_m32 Zombie_GetTypeInfo __vbaAryDestruct __vbaCyErrVar ord592 __vbaExitProc __vbaForEachCollObj __vbaVarForInit ord595 __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaForEachCollVar __vbaStrFixstr __vbaBoolVarNull _CIsin ord631 __vbaVarCmpGt __vbaVargVarMove ord632 __vbaNextEachCollObj ord525 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError ord529 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaDateR8 __vbaPutOwner4 ord561 __vbaNextEachCollVar __vbaObjVar __vbaI2I4 DllFunctionCall __vbaVarOr ord563 __vbaFpUI1 __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaRedim __vbaUI1ErrVar __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt __vbaObjIs __vbaVarAnd EVENT_SINK_QueryInterface __vbaStrUI1 __vbaExceptHandler ord712 __vbaStrToUnicode ord606 __vbaR4ErrVar _adj_fprem _adj_fdivr_m64 __vbaR8ErrVar ord607 ord608 ord531 ord716 __vbaFPException ord717 __vbaInStrVar ord319 __vbaStrVarVal __vbaUbound __vbaVarCat __vbaGetOwner4 __vbaDateVar __vbaI2Var ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec __vbaR8Str ord570 __vbaNew2 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaVarSetObj __vbaStrCopy __vbaI4Str __vbaVarCmpLt __vbaFreeStrList ord576 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq ord610 __vbaAryLock __vbaVarAdd __vbaLateMemCall ord320 __vbaVarDup ord612 __vbaStrToAnsi ord321 __vbaVarLateMemCallLd __vbaVarTstGe __vbaVarCopy ord616 ord617 _CIatan __vbaI2ErrVar __vbaAryCopy __vbaStrMove __vbaCastObj __vbaStrVarCopy ord619 _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing