jaffacakes118_Trojan[.]Win32[.]Inject[.]uvnw[.]24db977b4c96177525deeb3ef9d893d5

General

Target
jaffacakes118_Trojan.Win32.Inject.uvnw.24db977b4c96177525deeb3ef9d893d5
Size 600KB
Sample261018-vrexbastht
SHA256 f0acdeadb1e7d5cba5241aae8026d43b29d8ff409b7f5bdee4f4b5948657ebed
MD5 24db977b4c96177525deeb3ef9d893d5
SHA1 489fd99a62b3f74fa7787c90dddf79411e52de2b
SHA512 bdd7611bb56778700f7022104c247c1a2b0656b02550616952c688ebfb8fe5c66a79518c2664c93d6098bf8ff283a4c2abc2b1ebb5b11139d118875a78f31783
SSDEEP 12288:rjKOBmuKRGGR4z+POQFdJ/6jqU24hO/cKW:VmusGoNP1F//kKW
TLSH
T14CD4AF26B794E511E22E09310EB7DAA44929BC7196019C57F2D1370EBD72EC3EA33727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Inject.uvnw.24db977b4c96177525deeb3ef9d893d5

File Explorer

jaffacakes118_Trojan.Win32.Inject.uvnw.24db977b4c96177525deeb3ef9d893d5

.exe 600KB

jaffacakes118_Trojan.Win32.Inject.uvnw.24db977b4c96177525deeb3ef9d893d5

IMPHASH 7032f16ef64d03f346c64a6ea7f34f8d
SHA256 f0acdeadb1e7d5cba5241aae8026d43b29d8ff409b7f5bdee4f4b5948657ebed
MD5 24db977b4c96177525deeb3ef9d893d5
SHA1 489fd99a62b3f74fa7787c90dddf79411e52de2b
SHA512 bdd7611bb56778700f7022104c247c1a2b0656b02550616952c688ebfb8fe5c66a79518c2664c93d6098bf8ff283a4c2abc2b1ebb5b11139d118875a78f31783
SSDEEP 12288:rjKOBmuKRGGR4z+POQFdJ/6jqU24hO/cKW:VmusGoNP1F//kKW
TLSH
T14CD4AF26B794E511E22E09310EB7DAA44929BC7196019C57F2D1370EBD72EC3EA33727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8436

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaGosubReturn __vbaStrVarMove __vbaLenBstr __vbaVarIdiv __vbaPut3 __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaCopyBytes __vbaStrCat __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar ord666 __vbaAryDestruct __vbaStrBool __vbaExitProc __vbaVarForInit ord593 ord594 __vbaStrLike __vbaObjSet ord595 __vbaOnError ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord599 __vbaCyStr ord520 __vbaBoolVar __vbaRefVarAry _CIsin ord709 __vbaErase ord631 ord632 ord525 __vbaVarZero __vbaChkstk __vbaCyVar ord526 __vbaGosubFree __vbaFileClose EVENT_SINK_AddRef ord528 __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaCyI4 ord561 __vbaI2I4 DllFunctionCall __vbaFpUI1 __vbaCastObjVar __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaLateIdCallLd __vbaStrR8 __vbaRedim __vbaUI1ErrVar __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt __vbaObjIs EVENT_SINK_QueryInterface __vbaStr2Vec __vbaUI1I4 __vbaExceptHandler ord711 __vbaPrintFile __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 __vbaI2Str ord608 __vbaFPException __vbaInStrVar ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 __vbaInStr __vbaR8Str __vbaNew2 __vbaVar2Vec __vbaCyMulI2 _adj_fdiv_m32i ord572 _adj_fdivr_m32i ord573 __vbaStrCopy ord681 __vbaI4Str __vbaFreeStrList ord576 __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarAdd __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI2 __vbaVarLateMemCallLd __vbaVarCopy ord616 __vbaFpI4 __vbaLateMemCallLd __vbaRecDestructAnsi ord617 __vbaR8IntI2 _CIatan ord618 __vbaAryCopy __vbaStrMove __vbaI4Cy ord619 __vbaR8IntI4 __vbaStrVarCopy _allmul __vbaFpCSngR4 __vbaLateIdSt _CItan __vbaUI1Var __vbaAryUnlock __vbaFPInt __vbaVarForNext _CIexp __vbaMidStmtBstr __vbaRecAssign ord580 __vbaFreeObj __vbaFreeStr ord581

Sharing