jaffacakes118_Trojan[.]Win32[.]Refroso[.]gfta[.]078f2da32fcfb02bda3f9006e2d76537

General

Target
jaffacakes118_Trojan.Win32.Refroso.gfta.078f2da32fcfb02bda3f9006e2d76537
Size 508KB
Sample261018-stq19abe79
SHA256 9425ef0d8cb6ba0b5d9986709c2c20cd7d675cab3a5b4fcff0bf2e0e0365d962
MD5 078f2da32fcfb02bda3f9006e2d76537
SHA1 d204c7bb7d94c0e62f59b99dcff45f7d537bd9da
SHA512 ea27d3cd50c19271735b576abdd5ff13aa2fb6ce452dc86158878d2f1ff75df2b32ec41c258c298cbe7b348b616fbd0e4d98e89e71ca0938036125e588a443a3
SSDEEP 3072:cEXrPlHuOAYgR/Tmto0ak99JxDPFt3LGnmCpHOtjj3WEMJL9J1fTDlVs/mLmp1Gv:QPbKrwXRIQnPaZoPxBz
TLSH
T12DB4623DD12D575BC6F9DA3778AE580AF0A064233312894DE4F713AAF908385B9C672D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Refroso.gfta.078f2da32fcfb02bda3f9006e2d76537

File Explorer

jaffacakes118_Trojan.Win32.Refroso.gfta.078f2da32fcfb02bda3f9006e2d76537

.exe 508KB

jaffacakes118_Trojan.Win32.Refroso.gfta.078f2da32fcfb02bda3f9006e2d76537

IMPHASH 64d9d5a90a3b7b6a235bd6c7039b4bd5
SHA256 9425ef0d8cb6ba0b5d9986709c2c20cd7d675cab3a5b4fcff0bf2e0e0365d962
MD5 078f2da32fcfb02bda3f9006e2d76537
SHA1 d204c7bb7d94c0e62f59b99dcff45f7d537bd9da
SHA512 ea27d3cd50c19271735b576abdd5ff13aa2fb6ce452dc86158878d2f1ff75df2b32ec41c258c298cbe7b348b616fbd0e4d98e89e71ca0938036125e588a443a3
SSDEEP 3072:cEXrPlHuOAYgR/Tmto0ak99JxDPFt3LGnmCpHOtjj3WEMJL9J1fTDlVs/mLmp1Gv:QPbKrwXRIQnPaZoPxBz
TLSH
T12DB4623DD12D575BC6F9DA3778AE580AF0A064233312894DE4F713AAF908385B9C672D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr ord696 __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaCopyBytes ord628 __vbaStrCat __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj ord665 _adj_fdiv_m32 __vbaAryDestruct __vbaVarForInit __vbaObjSet __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i _CIsin __vbaErase ord709 ord631 __vbaVarZero ord632 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaAryConstruct2 DllFunctionCall __vbaLbound _adj_fpatan __vbaRedim __vbaUI1ErrVar EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler ord712 _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var ord644 ord537 _CIlog __vbaErrorOverflow __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaAryLock __vbaVarAdd __vbaVarMod ord616 __vbaFpI4 _CIatan __vbaAryCopy __vbaStrMove _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing