jaffacakes118_Trojan[.]Win32[.]Inject[.]qafm[.]2b4d55f8aa66c30b9b0af33315bf111d

General

Target
jaffacakes118_Trojan.Win32.Inject.qafm.2b4d55f8aa66c30b9b0af33315bf111d
Size 564KB
Sample261018-vpbf4sstdz
SHA256 e84d994ac402783eb936710d6686fb4d135eba10c8e01f4679c4c7a3b1da835a
MD5 2b4d55f8aa66c30b9b0af33315bf111d
SHA1 991bdc56de6afd1161049d0c2280392b138ece63
SHA512 d81117c76a87f2c4bfb10372325e25db9cf0638ad75d05eb56a3fd2443d376ecc44f6ba399465a8ae2fa5eb8a7f40bf7923f2864d86888f50a78fe0b94b50fc2
SSDEEP 12288:hMu0lOQHx6q8ZjB3/j5Zad+gbZc3Ey+9f9Z2zkPaCxV:hMu0lOwx67B3brwrcUVfZOklP
TLSH
T134C4125DB27AD57AE9C749B63C28D1E411BEB53B3D0BE80BFB0C1B6CB6A40841556323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Inject.qafm.2b4d55f8aa66c30b9b0af33315bf111d

File Explorer

jaffacakes118_Trojan.Win32.Inject.qafm.2b4d55f8aa66c30b9b0af33315bf111d

.exe 564KB

jaffacakes118_Trojan.Win32.Inject.qafm.2b4d55f8aa66c30b9b0af33315bf111d

IMPHASH b96c810b929f0cbb8801316e635bfe53
SHA256 e84d994ac402783eb936710d6686fb4d135eba10c8e01f4679c4c7a3b1da835a
MD5 2b4d55f8aa66c30b9b0af33315bf111d
SHA1 991bdc56de6afd1161049d0c2280392b138ece63
SHA512 d81117c76a87f2c4bfb10372325e25db9cf0638ad75d05eb56a3fd2443d376ecc44f6ba399465a8ae2fa5eb8a7f40bf7923f2864d86888f50a78fe0b94b50fc2
SSDEEP 12288:hMu0lOQHx6q8ZjB3/j5Zad+gbZc3Ey+9f9Z2zkPaCxV:hMu0lOwx67B3brwrcUVfZOklP
TLSH
T134C4125DB27AD57AE9C749B63C28D1E411BEB53B3D0BE80BFB0C1B6CB6A40841556323
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5940

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaNextEachVar ord516 _adj_fprem1 ord518 ord626 __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaVarForInit __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i __vbaVarIndexLoad ord598 _CIsin __vbaErase ord631 __vbaVarZero ord525 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaVarTstEq __vbaAryConstruct2 __vbaObjVar DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaUI1ErrVar EVENT_SINK_Release ord601 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaInStrVar __vbaUbound __vbaVarCat __vbaI2Var ord644 ord537 _CIlog __vbaFileOpen __vbaInStr __vbaR8Str __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaVarAdd __vbaAryLock __vbaLateMemCall __vbaVarDup __vbaVarMod ord616 __vbaFpI4 __vbaVarLateMemCallLd ord617 _CIatan __vbaAryCopy __vbaStrMove ord619 __vbaForEachVar _allmul _CItan __vbaUI1Var __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing