jaffacakes118_Trojan[.]Win32[.]Diple[.]epdi[.]fd4e304d00a0448741d6e49dbdcddff1

General

Target
jaffacakes118_Trojan.Win32.Diple.epdi.fd4e304d00a0448741d6e49dbdcddff1
Size 120KB
Sample261018-zgp2ravvbx
SHA256 02d9cc17506a8a73dea9da85f61c0265c0092ba8acb757cee1beb0c027596237
MD5 fd4e304d00a0448741d6e49dbdcddff1
SHA1 148421004b8661e443709bd62a3363592ee3ed80
SHA512 7a3e39625ac72953cead3bd1f4907081ffe7376f693d2b026aac0c58dc5d942a3575917b27e4a649608644ec8f8295b5fbb25523e66b46eef7266b1027c64391
SSDEEP 3072:h0CbZSukOY8hrJFVNM/N/5sfqDfwqpeG5:Sork6hrJ3NON/5sG9t
TLSH
T16CC3A32A77A1E23EC625CAF42D4A43B0907DAD3521D2AD17F7C21B16B2F1D6BD221713
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Diple.epdi.fd4e304d00a0448741d6e49dbdcddff1

File Explorer

jaffacakes118_Trojan.Win32.Diple.epdi.fd4e304d00a0448741d6e49dbdcddff1

.exe 120KB

jaffacakes118_Trojan.Win32.Diple.epdi.fd4e304d00a0448741d6e49dbdcddff1

IMPHASH c8770d9c3e993c66c95265f3a6c4487a
SHA256 02d9cc17506a8a73dea9da85f61c0265c0092ba8acb757cee1beb0c027596237
MD5 fd4e304d00a0448741d6e49dbdcddff1
SHA1 148421004b8661e443709bd62a3363592ee3ed80
SHA512 7a3e39625ac72953cead3bd1f4907081ffe7376f693d2b026aac0c58dc5d942a3575917b27e4a649608644ec8f8295b5fbb25523e66b46eef7266b1027c64391
SSDEEP 3072:h0CbZSukOY8hrJFVNM/N/5sfqDfwqpeG5:Sork6hrJ3NON/5sG9t
TLSH
T16CC3A32A77A1E23EC625CAF42D4A43B0907DAD3521D2AD17F7C21B16B2F1D6BD221713
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

ord582 __vbaVarSub __vbaStrI2 ord583 ord584 _CIcos _adj_fptan __vbaStrI4 ord585 __vbaVarMove ord187 __vbaVarVargNofree ord586 ord693 __vbaFreeVar ord587 __vbaAryMove __vbaLenBstr ord695 __vbaStrVarMove ord696 __vbaFreeVarList __vbaEnd __vbaPut3 _adj_fdiv_m64 __vbaPut4 ord516 ord517 _adj_fprem1 ord519 __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaRecDestruct __vbaLenBstrB __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct ord669 __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i __vbaVarIndexLoad ord306 __vbaStrFixstr ord307 ord630 __vbaFpR8 _CIsin ord631 __vbaErase ord709 __vbaVarZero __vbaChkstk ord633 __vbaFileClose ord527 __vbaGenerateBoundsError __vbaStrCmp __vbaGet3 __vbaAryConstruct2 __vbaPutOwner3 __vbaI2I4 DllFunctionCall __vbaFpUI1 __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaUI1I2 _CIsqrt __vbaVarAnd __vbaUI1I4 __vbaFpCmpCy __vbaVarMul __vbaExceptHandler ord711 __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord714 ord608 __vbaFPException ord318 ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaGetOwner4 ord535 __vbaI2Var ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr __vbaNew2 __vbaVar2Vec __vbaVarInt _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList __vbaVarNot __vbaDerefAry1 ord576 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaVarAdd __vbaStrToAnsi __vbaVarDup ord614 __vbaFpI4 ord616 __vbaVarCopy _CIatan __vbaStrMove __vbaAryCopy ord618 __vbaStrVarCopy _allmul _CItan __vbaAryUnlock __vbaFPInt __vbaUI1Var _CIexp __vbaMidStmtBstr __vbaFreeStr __vbaI4ErrVar __vbaFreeObj

Sharing