jaffacakes118_Trojan-Downloader[.]Win32[.]Zlob[.]biv[.]3ae378289489efe3ce4be100c508ce73

General

Target
jaffacakes118_Trojan-Downloader.Win32.Zlob.biv.3ae378289489efe3ce4be100c508ce73
Size 28KB
Sample261006-r4peqsfc64
SHA256 56a4e3e5488d47a50c346e0ff426d96da42fbc7513315af44bc9dbb72006ec3b
MD5 3ae378289489efe3ce4be100c508ce73
SHA1 4c6f569f05eadda729015a92540122cdf2803fc2
SHA512 eb98c0d1fd10d85c6fa45c74f47d09c2d63825921e7642565fef919ff40a64628434ddadb51e120639f0238ed6227a3bb11b2168b4a4ccc0ec61283d9f027f79
SSDEEP 384:uhv95f4EkcCiY5oOauwma5m34HDtrUSpGZfC8RK3DoYuOurpuW46JBvLD:w9kcCi4oOauRUhjpCYuOuFl46JB
TLSH
T16CD2B90211D41F96D39E57306193E3EF8A9E84B12F8079DFCAD329E0537B47AD525A07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.Zlob.biv.3ae378289489efe3ce4be100c508ce73

File Explorer

jaffacakes118_Trojan-Downloader.Win32.Zlob.biv.3ae378289489efe3ce4be100c508ce73

.dll 28KB

jaffacakes118_Trojan-Downloader.Win32.Zlob.biv.3ae378289489efe3ce4be100c508ce73

IMPHASH fdb46f96c9d80c6a7a2620c0192fdc99
SHA256 56a4e3e5488d47a50c346e0ff426d96da42fbc7513315af44bc9dbb72006ec3b
MD5 3ae378289489efe3ce4be100c508ce73
SHA1 4c6f569f05eadda729015a92540122cdf2803fc2
SHA512 eb98c0d1fd10d85c6fa45c74f47d09c2d63825921e7642565fef919ff40a64628434ddadb51e120639f0238ed6227a3bb11b2168b4a4ccc0ec61283d9f027f79
SSDEEP 384:uhv95f4EkcCiY5oOauwma5m34HDtrUSpGZfC8RK3DoYuOurpuW46JBvLD:w9kcCi4oOauRUhjpCYuOuFl46JB
TLSH
T16CD2B90211D41F96D39E57306193E3EF8A9E84B12F8079DFCAD329E0537B47AD525A07
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetProcessHeap HeapFree HeapReAlloc GetTempFileNameA GetTempPathA GetProcAddress GetModuleHandleA lstrcatA MulDiv GetTickCount CloseHandle ReadFile CreateFileA WaitForMultipleObjects WaitForSingleObject DeleteFileA HeapAlloc SetFilePointer GetModuleFileNameA InterlockedExchange RtlUnwind WriteFile GetModuleHandleW ResetEvent OpenEventA PulseEvent GetCommandLineW FindNextFileW lstrlenA CreateProcessA VirtualQuery GetLastError GlobalAlloc lstrcpynA lstrcpyA CreateEventA GlobalFree

user32

ShowWindowAsync wsprintfA CallWindowProcA DestroyWindow EnableWindow GetWindowLongA RegisterWindowMessageA SetWindowLongA MessageBoxA SetWindowTextA SendMessageA GetDlgItem GetFocus IsWindowVisible ShowWindow SetDlgItemTextA CharLowerBuffA GetClientRect GetWindowRect CreateWindowExA

advapi32

RegOpenKeyA RegQueryValueExA RegCloseKey RegEnumValueA RegOpenKeyExA

wininet

InternetReadFile InternetSetFilePointer HttpOpenRequestA InternetCrackUrlA FindCloseUrlCache FindFirstUrlCacheEntryA InternetCloseHandle InternetOpenA InternetConnectA

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

Sharing