jaffacakes118_Trojan[.]Win32[.]VBKrypt[.]smof[.]c6ebb1f916a4d9b60a9ed12f554de12c

General

Target
jaffacakes118_Trojan.Win32.VBKrypt.smof.c6ebb1f916a4d9b60a9ed12f554de12c
Size 40KB
Sample261018-s2ggsaev8k
SHA256 e669844c5794b60070186c45c72b49e474536e8f3e29bc8fd79a351d6421fd10
MD5 c6ebb1f916a4d9b60a9ed12f554de12c
SHA1 84768e447c25d8329fd317fbe05a4377979fd09f
SHA512 afbc50d4a63a48003f34892741b0a2ae5b2288876f98a7f75874bf4748190662ab97e2c8f52ed70d3b68c12c303dff5a2dcb1f9cb8ca3d6e7b9087288fa93089
SSDEEP 768:VpYy0LZ4v6x7RbgPcE/0WjDqxtTb8o2xz0:V6y1v6RbgP/sUXo2F0
TLSH
T1CD03852FF25CE332F38B86B91C2543A9945E3C3101A1D8A6F706FA597EB09C5B961347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.VBKrypt.smof.c6ebb1f916a4d9b60a9ed12f554de12c

File Explorer

jaffacakes118_Trojan.Win32.VBKrypt.smof.c6ebb1f916a4d9b60a9ed12f554de12c

.exe 40KB

jaffacakes118_Trojan.Win32.VBKrypt.smof.c6ebb1f916a4d9b60a9ed12f554de12c

IMPHASH 4e3b1210f7894689fd1311583c96ea5a
SHA256 e669844c5794b60070186c45c72b49e474536e8f3e29bc8fd79a351d6421fd10
MD5 c6ebb1f916a4d9b60a9ed12f554de12c
SHA1 84768e447c25d8329fd317fbe05a4377979fd09f
SHA512 afbc50d4a63a48003f34892741b0a2ae5b2288876f98a7f75874bf4748190662ab97e2c8f52ed70d3b68c12c303dff5a2dcb1f9cb8ca3d6e7b9087288fa93089
SSDEEP 768:VpYy0LZ4v6x7RbgPcE/0WjDqxtTb8o2xz0:V6y1v6RbgP/sUXo2F0
TLSH
T1CD03852FF25CE332F38B86B91C2543A9945E3C3101A1D8A6F706FA597EB09C5B961347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5396

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar ord666 __vbaAryDestruct __vbaVarIndexLoadRefLock __vbaExitProc __vbaVarForInit __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i _adj_fdivr_m16i ord598 __vbaVarIndexLoad _CIsin __vbaErase ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaStrCmp __vbaGet3 __vbaPutOwner3 __vbaAryConstruct2 __vbaVarTstEq DllFunctionCall _adj_fpatan __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord601 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaFPException ord717 __vbaGetOwner3 __vbaStrVarVal __vbaUbound __vbaVarCat ord644 _CIlog __vbaFileOpen ord570 ord648 __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord578 ord100 __vbaVarTstNe __vbaI4Var __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaFpI4 __vbaRecDestructAnsi _CIatan __vbaStrMove __vbaAryCopy __vbaR8IntI4 _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj

Sharing