jaffacakes118_Trojan-Spy[.]Win32[.]VB[.]pkl[.]ee39f7a5fe62146b60d36abfedcfb877

General

Target
jaffacakes118_Trojan-Spy.Win32.VB.pkl.ee39f7a5fe62146b60d36abfedcfb877
Size 56KB
Sample261018-3bhx2ada62
SHA256 c662db0cc72140e0be783f039bbd356704ea970a2b5e0cb9ca51c01f6887b827
MD5 ee39f7a5fe62146b60d36abfedcfb877
SHA1 cce7de5acdb19ed8104392ea842f384cd2ef7f99
SHA512 886c32a99fb13254095cf1080c8dde7bd5c14952c382b2a6d6c2408fec9d93fc0e56eec8a0ebe05e4e9a978c76f1e3132f63e7836e82a425bd7420196194a4b3
SSDEEP 768:+p3bRLGwB1By+XjFL9QaeAudbVf6THN0IR09vO7i4alXt1KJM:yFLy+XjrzqO0IR0NO7OwM
TLSH
T1E043B317EA646529E18186F21A26975B2C2B7D320250AD07F386BF5C3470BE3BCF571B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Spy.Win32.VB.pkl.ee39f7a5fe62146b60d36abfedcfb877

File Explorer

jaffacakes118_Trojan-Spy.Win32.VB.pkl.ee39f7a5fe62146b60d36abfedcfb877

.exe 56KB

jaffacakes118_Trojan-Spy.Win32.VB.pkl.ee39f7a5fe62146b60d36abfedcfb877

IMPHASH bd62fefb3a448c89610ae7813c8d6692
SHA256 c662db0cc72140e0be783f039bbd356704ea970a2b5e0cb9ca51c01f6887b827
MD5 ee39f7a5fe62146b60d36abfedcfb877
SHA1 cce7de5acdb19ed8104392ea842f384cd2ef7f99
SHA512 886c32a99fb13254095cf1080c8dde7bd5c14952c382b2a6d6c2408fec9d93fc0e56eec8a0ebe05e4e9a978c76f1e3132f63e7836e82a425bd7420196194a4b3
SSDEEP 768:+p3bRLGwB1By+XjFL9QaeAudbVf6THN0IR09vO7i4alXt1KJM:yFLy+XjrzqO0IR0NO7OwM
TLSH
T1E043B317EA646529E18186F21A26975B2C2B7D320250AD07F386BF5C3470BE3BCF571B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6048

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaLateIdCall __vbaStrVarMove __vbaLenBstr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni ord519 __vbaCopyBytes __vbaStrCat __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord667 __vbaExitProc __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaStrFixstr __vbaBoolVarNull _CIsin ord631 ord525 ord632 __vbaChkstk ord526 EVENT_SINK_AddRef ord527 ord528 __vbaStrCmp __vbaVarTstEq __vbaObjVar __vbaI2I4 DllFunctionCall __vbaVarLateMemSt _adj_fpatan __vbaLateIdCallLd __vbaRecUniToAnsi EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord607 ord608 ord716 __vbaFPException __vbaInStrVar __vbaStrVarVal __vbaVarCat ord537 _CIlog __vbaErrorOverflow __vbaInStr __vbaNew2 __vbaVarLateMemCallLdRf _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaVarDup __vbaStrToAnsi ord616 __vbaVarCopy __vbaVarLateMemCallLd ord617 __vbaLateMemCallLd _CIatan __vbaCastObj __vbaStrMove ord543 _allmul __vbaLateIdSt ord544 _CItan ord546 ord547 _CIexp __vbaFreeObj __vbaFreeStr

Sharing