jaffacakes118_Trojan-Spy[.]Win32[.]WinSpy[.]cwe[.]cd2bd4114e32f9ba30d46c4c0ecd0ffc

General

Target
jaffacakes118_Trojan-Spy.Win32.WinSpy.cwe.cd2bd4114e32f9ba30d46c4c0ecd0ffc
Size 168KB
Sample261018-3dptcsby3y
SHA256 d1a6b6e8f9c5ed3754a3664b19b13450b286c7b4f6e939bc9ca3e8ee54ed3188
MD5 cd2bd4114e32f9ba30d46c4c0ecd0ffc
SHA1 9ad3d649d2d04bfc8c2bed86576fa18a9b3edcce
SHA512 bb666089a393d286a6a7eba0d5c4fd368cdcccbd7e88b0ce8aaba8fab964c85dc38f02535fbe018db06d223646a761a13b16bb9e03e7dd051a246c829b0cb18e
SSDEEP 3072:ds/aAYHqLjzNJ99quKVi3gUd0n1y+9FFOIu4f0iE9HVdAClFWKTVBovyqvnVZ+We:ds9Y6zNJH1gUCn1ykFFNI9HVdAClFWKd
TLSH
T136F3C613FA40B15AD11385F05871DAAA7C167D320680AD477381BB5D2A73AE3B5F632F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Spy.Win32.WinSpy.cwe.cd2bd4114e32f9ba30d46c4c0ecd0ffc

File Explorer

jaffacakes118_Trojan-Spy.Win32.WinSpy.cwe.cd2bd4114e32f9ba30d46c4c0ecd0ffc

.exe 168KB

jaffacakes118_Trojan-Spy.Win32.WinSpy.cwe.cd2bd4114e32f9ba30d46c4c0ecd0ffc

IMPHASH 42e6ae06b8563a02848565c7173d2393
SHA256 d1a6b6e8f9c5ed3754a3664b19b13450b286c7b4f6e939bc9ca3e8ee54ed3188
MD5 cd2bd4114e32f9ba30d46c4c0ecd0ffc
SHA1 9ad3d649d2d04bfc8c2bed86576fa18a9b3edcce
SHA512 bb666089a393d286a6a7eba0d5c4fd368cdcccbd7e88b0ce8aaba8fab964c85dc38f02535fbe018db06d223646a761a13b16bb9e03e7dd051a246c829b0cb18e
SSDEEP 3072:ds/aAYHqLjzNJ99quKVi3gUd0n1y+9FFOIu4f0iE9HVdAClFWKTVBovyqvnVZ+We:ds9Y6zNJH1gUCn1ykFFNI9HVdAClFWKd
TLSH
T136F3C613FA40B15AD11385F05871DAAA7C167D320680AD477381BB5D2A73AE3B5F632F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10316

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLineInputStr __vbaLenBstr __vbaStrVarMove __vbaPut3 __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaPut4 __vbaFreeObjList __vbaStrErrVarCopy _adj_fprem1 __vbaRecAnsiToUni ord518 ord519 __vbaResume __vbaStrCat __vbaError __vbaLsetFixstr ord660 __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit __vbaExitProc ord595 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaStrFixstr ord520 __vbaBoolVarNull __vbaVarTstLt _CIsin __vbaErase ord631 ord632 __vbaVargVarMove ord525 __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 __vbaStrCmp __vbaGet4 __vbaVarTstEq ord561 __vbaI2I4 __vbaObjVar DllFunctionCall __vbaVarOr ord563 __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaUI1I2 _CIsqrt __vbaObjIs EVENT_SINK_QueryInterface __vbaExceptHandler __vbaInputFile __vbaPrintFile __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord607 ord608 ord609 __vbaFPException __vbaInStrVar __vbaUbound __vbaStrVarVal __vbaVarCat ord535 __vbaI2Var ord536 ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec ord648 ord570 __vbaVarLateMemCallLdRf __vbaInStr __vbaNew2 __vbaR8Str ord571 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq ord610 __vbaAryLock ord611 __vbaLateMemCall __vbaVarAdd __vbaVarDup ord612 __vbaStrToAnsi __vbaVarCopy __vbaFpI4 __vbaVarLateMemCallLd ord616 __vbaLateMemCallLd ord617 _CIatan __vbaAryCopy __vbaCastObj __vbaStrMove ord619 __vbaStrVarCopy ord650 _allmul _CItan ord546 __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr ord581

Sharing