jaffacakes118_Trojan-Dropper[.]Win32[.]Agent[.]cssg[.]4a4f3a9657a242ce4cd59bdd0db9e091

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Dropper.Win32.Agent.cssg.4a4f3a9657a242ce4cd59bdd0db9e091
Size 96KB
Sample261006-s34npsfd82
SHA256 93a9917e997d57c0327e9572b1b88e49d569cb7772166ce4f338710357c7b967
MD5 4a4f3a9657a242ce4cd59bdd0db9e091
SHA1 c6b310fbb895496f3fc754c0764392355b2de836
SHA512 b60b39d14a67bb1adde9e85a114d00a1ddff41beefc3b6c4c4060d5eeffaa79433169622a088d920c66110009447bff68bce633a916e7a51efcd3b08caa1386b
SSDEEP 1536:i61I6UbdIwi/JWkj2dJd6mQ+Ap07CKf9wWSWLLHL5WGfLMvk0zGk/t3GjscjsF:R12bdIj/8E2dJ++AMCKfmWSWvHEDk05N
TLSH
T167A3F1567ED19837E8C7A67009E2FE62DBB78F61801386437706FFE8267428297591C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

installer

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Agent.cssg.4a4f3a9657a242ce4cd59bdd0db9e091

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_2

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Agent.cssg.4a4f3a9657a242ce4cd59bdd0db9e091

.exe 96KB

jaffacakes118_Trojan-Dropper.Win32.Agent.cssg.4a4f3a9657a242ce4cd59bdd0db9e091

IMPHASH d5703d4bc5185b080f135ba26402096a
SHA256 93a9917e997d57c0327e9572b1b88e49d569cb7772166ce4f338710357c7b967
MD5 4a4f3a9657a242ce4cd59bdd0db9e091
SHA1 c6b310fbb895496f3fc754c0764392355b2de836
SHA512 b60b39d14a67bb1adde9e85a114d00a1ddff41beefc3b6c4c4060d5eeffaa79433169622a088d920c66110009447bff68bce633a916e7a51efcd3b08caa1386b
SSDEEP 1536:i61I6UbdIwi/JWkj2dJd6mQ+Ap07CKf9wWSWLLHL5WGfLMvk0zGk/t3GjscjsF:R12bdIj/8E2dJ++AMCKfmWSWvHEDk05N
TLSH
T167A3F1567ED19837E8C7A67009E2FE62DBB78F61801386437706FFE8267428297591C3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

12747

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA ExitProcess GetCurrentProcess CopyFileA GetWindowsDirectoryA GetTempPathA CompareFileTime SetErrorMode lstrlenA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread LoadLibraryA CreateProcessA CreateFileA GetTempFileNameA lstrcatA GetProcAddress GetSystemDirectoryA GetVersion lstrcpyA RemoveDirectoryA SetFileTime CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile MulDiv ReadFile SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetCommandLineA

user32

ScreenToClient GetMessagePos CallWindowProcA IsWindowVisible LoadBitmapA CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuA CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos CheckDlgButton GetClassInfoA CreateWindowExA SystemParametersInfoA RegisterClassA SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow ShowWindow SendMessageTimeoutA FindWindowExA LoadCursorA SetCursor GetWindowLongA GetSysColor CharNextA DialogBoxParamA ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint wsprintfA

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderA SHGetPathFromIDListA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegEnumKeyA RegOpenKeyExA RegCloseKey RegDeleteKeyA RegDeleteValueA RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumValueA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA