jaffacakes118_Trojan-Downloader[.]Win32[.]Upatre[.]gkai[.]e8d4e87d7f31eb396cff677b616e9db6

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Downloader.Win32.Upatre.gkai.e8d4e87d7f31eb396cff677b616e9db6
Size 525KB
Sample261006-rb7evazzdx
SHA256 f69e897d60ca8375b56acd33591b6d15c5e5083bd963309ef3cc290a3d81688a
MD5 e8d4e87d7f31eb396cff677b616e9db6
SHA1 ddf7d521d235b704af67a311fdd8b2c119a9c857
SHA512 64ec3ff7b4152a51c148b6915c7b04f983bf2a3b002fbc7602f4f00b150b45b60c91500f4a745b607e4ea6c0bb479dcb4326c1fd7dd48588ec615366022649f0
SSDEEP 12288:fu/FXlw9EP1QhRtibo7IThzB7eqy38VRQsJcOdg:sF1LP1tb0If7q8jQsJcOu
TLSH
T176B46C08F679F7B4C033287A068BF5B71A237931556A8D36B3850E16FA72B7A171274C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.Upatre.gkai.e8d4e87d7f31eb396cff677b616e9db6

File Explorer

jaffacakes118_Trojan-Downloader.Win32.Upatre.gkai.e8d4e87d7f31eb396cff677b616e9db6

.exe 525KB

jaffacakes118_Trojan-Downloader.Win32.Upatre.gkai.e8d4e87d7f31eb396cff677b616e9db6

IMPHASH cef55cb23809a8e9964720f9728a2c16
SHA256 f69e897d60ca8375b56acd33591b6d15c5e5083bd963309ef3cc290a3d81688a
MD5 e8d4e87d7f31eb396cff677b616e9db6
SHA1 ddf7d521d235b704af67a311fdd8b2c119a9c857
SHA512 64ec3ff7b4152a51c148b6915c7b04f983bf2a3b002fbc7602f4f00b150b45b60c91500f4a745b607e4ea6c0bb479dcb4326c1fd7dd48588ec615366022649f0
SSDEEP 12288:fu/FXlw9EP1QhRtibo7IThzB7eqy38VRQsJcOdg:sF1LP1tb0If7q8jQsJcOu
TLSH
T176B46C08F679F7B4C033287A068BF5B71A237931556A8D36B3850E16FA72B7A171274C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

189073

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapSize Sleep GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter DeleteCriticalSection GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW SetFilePointer FreeEnvironmentStringsW GetModuleFileNameA GetModuleFileNameW GetStdHandle WriteFile ExitProcess HeapCreate IsValidCodePage WaitForSingleObject GetACP GetCPInfo GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringW GetStringTypeW LoadLibraryW HeapReAlloc FlushFileBuffers SetStdHandle WriteConsoleW CloseHandle GetUserDefaultUILanguage WideCharToMultiByte DeviceIoControl GetCurrentProcess TerminateProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter IsProcessorFeaturePresent HeapAlloc GetProcAddress InterlockedDecrement CreateEventA VirtualAlloc GetCurrentThreadId CreateFileW SetLastError GetModuleHandleW InterlockedIncrement TlsFree DecodePointer TlsSetValue TlsGetValue TlsAlloc GetConsoleWindow GetOEMCP GetLastError FormatMessageA GetThreadLocale LoadLibraryA RtlUnwind RaiseException HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW EnterCriticalSection LeaveCriticalSection EncodePointer

user32

MapWindowPoints DestroyWindow GetClientRect SendMessageA FillRect GetParent OemKeyScan LoadImageA BeginPaint GetWindowTextW SetCursor LoadCursorA HideCaret GetSystemMetrics ShowWindow TrackPopupMenuEx InsertMenuA CreatePopupMenu EnumWindows IsRectEmpty DispatchMessageA TranslateMessage TranslateAcceleratorA GetMessageA LoadAcceleratorsA LoadStringA SystemParametersInfoA GetMonitorInfoA MonitorFromWindow GetKeyState SetDlgItemTextA DrawFrameControl DefMDIChildProcA GetSubMenu GetSysColor GetCursorPos GetWindowLongA LookupIconIdFromDirectory SendDlgItemMessageA DrawMenuBar EnableMenuItem GetSystemMenu SetFocus GetDlgItem

gdi32

SetBkColor DeleteDC BitBlt SetWindowOrgEx CreateCompatibleBitmap CreateCompatibleDC SetTextJustification GetDeviceCaps SwapBuffers ExcludeClipRect SetTextColor SetDCPenColor CreateFontA DeleteObject RoundRect CreateHatchBrush GetStockObject Rectangle SelectObject CreatePen DPtoLP SetTextAlign

shell32

SHGetSpecialFolderLocation SHCreateShellItem SHGetFileInfoA

ole32

RegisterDragDrop

odbc32

ord41 ord106 ord86

avifil32

AVIFileCreateStreamA

msacm32

acmFormatTagDetailsA

pdh

PdhCollectQueryData

opengl32

wglGetCurrentDC

uxtheme

IsThemeBackgroundPartiallyTransparent DrawThemeBackground DrawThemeParentBackground

esent

JetUpdate JetTruncateLogInstance