jaffacakes118_Trojan[.]Win32[.]PEF13C[.]tgt[.]cff9fc9ffdecbcaf9239d38f822afaba

General

Target
jaffacakes118_Trojan.Win32.PEF13C.tgt.cff9fc9ffdecbcaf9239d38f822afaba
Size 99KB
Sample261018-sqa6mabe63
SHA256 cbedfa6c3a0818fbb42eece4f6d2f87e7b08c646cbdc659a370872eb5a0e4be6
MD5 cff9fc9ffdecbcaf9239d38f822afaba
SHA1 042414c6748513e2dc35374fac10827bc7df77ef
SHA512 808b17565dd047e172c11e4076c6c2c5c8aced24da64b0d31a0b68505f9bc069a2705f7acd57e6eb1b1ca92be5e29751494dae67d0ac1a352a147b8a6e32b8fb
SSDEEP 1536:3I0Mp5vzsFNEQCk3G+hBLjdYN71ykH679TxTfekXGGtocQHwJ2qS:3IZxQCR6YNYkH6795Gay
TLSH
T125A3741AF245B8B1E60640B4EE7F7774B2789C713244104FD352BB2BB6F5AC6A62520F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.PEF13C.tgt.cff9fc9ffdecbcaf9239d38f822afaba

File Explorer

jaffacakes118_Trojan.Win32.PEF13C.tgt.cff9fc9ffdecbcaf9239d38f822afaba

.exe 99KB

jaffacakes118_Trojan.Win32.PEF13C.tgt.cff9fc9ffdecbcaf9239d38f822afaba

IMPHASH 54395d7995a79770c1450ba856db08d9
SHA256 cbedfa6c3a0818fbb42eece4f6d2f87e7b08c646cbdc659a370872eb5a0e4be6
MD5 cff9fc9ffdecbcaf9239d38f822afaba
SHA1 042414c6748513e2dc35374fac10827bc7df77ef
SHA512 808b17565dd047e172c11e4076c6c2c5c8aced24da64b0d31a0b68505f9bc069a2705f7acd57e6eb1b1ca92be5e29751494dae67d0ac1a352a147b8a6e32b8fb
SSDEEP 1536:3I0Mp5vzsFNEQCk3G+hBLjdYN71ykH679TxTfekXGGtocQHwJ2qS:3IZxQCR6YNYkH6795Gay
TLSH
T125A3741AF245B8B1E60640B4EE7F7774B2789C713244104FD352BB2BB6F5AC6A62520F
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5448

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i _CIsin __vbaErase __vbaVarZero __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaI2I4 DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler _adj_fprem _adj_fdivr_m64 __vbaVarDiv __vbaFPException __vbaUbound __vbaVarCat ord537 ord644 _CIlog __vbaErrorOverflow __vbaR8Str __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaI4Str __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaVarDup __vbaFpI4 __vbaVarCopy ord617 _CIatan __vbaAryCopy __vbaUI1Str __vbaStrMove ord619 __vbaStrVarCopy _allmul __vbaLenVarB _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaI4ErrVar __vbaFreeStr

Sharing