jaffacakes118_Trojan-Downloader[.]Win32[.]SetupFactory[.]b[.]d916c9075429b554f13e0e5ad17a506d

General

Target
jaffacakes118_Trojan-Downloader.Win32.SetupFactory.b.d916c9075429b554f13e0e5ad17a506d
Size 532KB
Sample261006-phbweaeh36
SHA256 bec59ae736f5568404be9c712408dba856be43485378136b4cf912977b15c740
MD5 d916c9075429b554f13e0e5ad17a506d
SHA1 55f136c6430fc2b33dfa5e4b8e0a47ab6435646e
SHA512 8a92551fe13ecbdb2c4b3b08e74bd05532f8f95f6d7489baefd59151be7cd9785a040daa586307a3b8cc7085043da282c05067077e84640530112ca5e6b09f0d
SSDEEP 12288:SvfyIIIzAClE7uDOch+h2ul/mJohNDuBQ:esSzlEqF+hVcOhv
TLSH
T198C422477BB62AA1C0AD4A3114735B22FA7AFC399950460B5FD8FD4F0DB0962843BE47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.SetupFactory.b.d916c9075429b554f13e0e5ad17a506d

File Explorer

jaffacakes118_Trojan-Downloader.Win32.SetupFactory.b.d916c9075429b554f13e0e5ad17a506d

.exe 532KB

jaffacakes118_Trojan-Downloader.Win32.SetupFactory.b.d916c9075429b554f13e0e5ad17a506d

IMPHASH a24e57cfb1e35030a9b4252bf1fa8b4b
SHA256 bec59ae736f5568404be9c712408dba856be43485378136b4cf912977b15c740
MD5 d916c9075429b554f13e0e5ad17a506d
SHA1 55f136c6430fc2b33dfa5e4b8e0a47ab6435646e
SHA512 8a92551fe13ecbdb2c4b3b08e74bd05532f8f95f6d7489baefd59151be7cd9785a040daa586307a3b8cc7085043da282c05067077e84640530112ca5e6b09f0d
SSDEEP 12288:SvfyIIIzAClE7uDOch+h2ul/mJohNDuBQ:esSzlEqF+hVcOhv
TLSH
T198C422477BB62AA1C0AD4A3114735B22FA7AFC399950460B5FD8FD4F0DB0962843BE47
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7581

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpiA lstrcpyA lstrlenA _lclose RemoveDirectoryA DeleteFileA GetModuleFileNameA _lread _llseek _lopen GetDiskFreeSpaceA SetCurrentDirectoryA CreateDirectoryA GetFileAttributesA lstrcatA GetTempPathA GetCurrentDirectoryA _lwrite _lcreat CloseHandle GetExitCodeProcess CreateProcessA ExitProcess TerminateProcess GetCurrentProcess HeapFree HeapAlloc GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc RtlUnwind UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue GetLastError WriteFile GetCPInfo GetACP GetOEMCP GetProcAddress LoadLibraryA InterlockedDecrement InterlockedIncrement MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

TranslateMessage DispatchMessageA PeekMessageA MsgWaitForMultipleObjects wsprintfA LoadCursorA SetCursor MessageBoxA

Sharing