jaffacakes118_Trojan[.]Win32[.]VBKrypt[.]smxt[.]77c137884233508a2e6cf2cf9c64a12c

General

Target
jaffacakes118_Trojan.Win32.VBKrypt.smxt.77c137884233508a2e6cf2cf9c64a12c
Size 28KB
Sample261018-s2jbdaev8l
SHA256 bfad4d7a220e1097145d65bd6d931efecf9e86b1c2b5331c6a449ffe06dc43ce
MD5 77c137884233508a2e6cf2cf9c64a12c
SHA1 8ff7b9148c16eaca3ef52e8ac3ad3b0428ef0ea9
SHA512 047b961feb26569f3a65a14f309af01e0bf947aff3541c7eecf880c8f79c4a1f6de6d9dc610ce798146b5be26b0bae2511972215438145f1bdabf6c3210363b9
SSDEEP 384:IrFhBi2BxB0BDXnLO9YLI/hND3CuecguOgqm4xpA9SDZ4/R3I:CiPdLWND3CuecguOxzn2I+5
TLSH
T1CFD25432BA0C4432F2188AB1595292EEB8157C331D928C1BBB4BBB9D5D38587B5F070F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.VBKrypt.smxt.77c137884233508a2e6cf2cf9c64a12c

File Explorer

jaffacakes118_Trojan.Win32.VBKrypt.smxt.77c137884233508a2e6cf2cf9c64a12c

.exe 28KB

jaffacakes118_Trojan.Win32.VBKrypt.smxt.77c137884233508a2e6cf2cf9c64a12c

IMPHASH e2582d8845f747531c37bae1e78992c4
SHA256 bfad4d7a220e1097145d65bd6d931efecf9e86b1c2b5331c6a449ffe06dc43ce
MD5 77c137884233508a2e6cf2cf9c64a12c
SHA1 8ff7b9148c16eaca3ef52e8ac3ad3b0428ef0ea9
SHA512 047b961feb26569f3a65a14f309af01e0bf947aff3541c7eecf880c8f79c4a1f6de6d9dc610ce798146b5be26b0bae2511972215438145f1bdabf6c3210363b9
SSDEEP 384:IrFhBi2BxB0BDXnLO9YLI/hND3CuecguOgqm4xpA9SDZ4/R3I:CiPdLWND3CuecguOxzn2I+5
TLSH
T1CFD25432BA0C4432F2188AB1595292EEB8157C331D928C1BBB4BBB9D5D38587B5F070F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5168

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i _CIsin __vbaErase ord631 __vbaVarZero ord632 __vbaChkstk ord526 __vbaFileClose __vbaGenerateBoundsError __vbaGet3 __vbaAryConstruct2 DllFunctionCall _adj_fpatan __vbaRedim __vbaRecUniToAnsi __vbaUI1I2 _CIsqrt __vbaExceptHandler ord711 __vbaStrToUnicode ord713 _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaI2Var ord644 ord537 _CIlog __vbaErrorOverflow __vbaFileOpen ord570 __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaVarAdd __vbaAryLock __vbaStrToAnsi __vbaFpI2 __vbaVarMod ord616 __vbaFpI4 _CIatan __vbaAryCopy __vbaStrMove _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing