jaffacakes118_Trojan-Dropper[.]Win32[.]Agent[.]aap[.]3ebe3442634f3978b0fe74f4a53b5d9e

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Dropper.Win32.Agent.aap.3ebe3442634f3978b0fe74f4a53b5d9e
Size 104KB
Sample261006-sgpbwsfc93
SHA256 c727ba4b2bac610d3f5ce08ea19d7b8eb3562afa3ae2b404d377f45548783ff6
MD5 3ebe3442634f3978b0fe74f4a53b5d9e
SHA1 75e116629780033768813c726a0e4a921afcd924
SHA512 1aee613753c80a9b130b02e802e9ea8949c44e2430479e209ce27f02f5f91fb5ee3ba74bb1b4a26cf0b249c571522b9f2df7541b5122a0d50f1517ef8928a87e
SSDEEP 1536:J6mnPeP0+uVQesB06ew4Q448IABV6jurVuBQmrvfGG:kkPeP0+QQesB06ew4Q44s6ws
TLSH
T1FCA30A1766460860EA598330477B6F79852B6C67A7A59FCF8B44FE0D48732E0EC7221F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Agent.aap.3ebe3442634f3978b0fe74f4a53b5d9e

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Agent.aap.3ebe3442634f3978b0fe74f4a53b5d9e

.exe 104KB

jaffacakes118_Trojan-Dropper.Win32.Agent.aap.3ebe3442634f3978b0fe74f4a53b5d9e

IMPHASH ef237906c0e3b5264c51f83854cda498
SHA256 c727ba4b2bac610d3f5ce08ea19d7b8eb3562afa3ae2b404d377f45548783ff6
MD5 3ebe3442634f3978b0fe74f4a53b5d9e
SHA1 75e116629780033768813c726a0e4a921afcd924
SHA512 1aee613753c80a9b130b02e802e9ea8949c44e2430479e209ce27f02f5f91fb5ee3ba74bb1b4a26cf0b249c571522b9f2df7541b5122a0d50f1517ef8928a87e
SSDEEP 1536:J6mnPeP0+uVQesB06ew4Q448IABV6jurVuBQmrvfGG:kkPeP0+QQesB06ew4Q44s6ws
TLSH
T1FCA30A1766460860EA598330477B6F79852B6C67A7A59FCF8B44FE0D48732E0EC7221F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8625

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord2985 ord3081 ord3262 ord2976 ord3830 ord3831 ord3825 ord3079 ord4080 ord4622 ord4424 ord3738 ord561 ord825 ord815 ord641 ord2514 ord2621 ord1134 ord540 ord800 ord5265 ord4376 ord4853 ord4998 ord4710 ord6052 ord4078 ord1775 ord4407 ord5241 ord2385 ord5163 ord6374 ord4353 ord3259 ord3798 ord4837 ord4441 ord2648 ord4465 ord3136 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord4627 ord4425 ord3597 ord4673 ord4234 ord1146 ord1168 ord537 ord4160 ord2863 ord2379 ord755 ord470 ord4224 ord535 ord3097 ord858 ord2818 ord1200 ord922 ord924 ord926 ord3346 ord2396 ord5199 ord1089 ord3922 ord5731 ord2512 ord2554 ord4486 ord6375 ord4274 ord3147 ord2982 ord5714 ord5289 ord5307 ord4698 ord4079 ord2725 ord5302 ord5300 ord2055 ord6376 ord5280 ord324 ord1576

msvcrt

_except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _controlfp _acmdln exit _onexit __CxxFrameHandler printf malloc __dllonexit _XcptFilter _exit _initterm __getmainargs _setmbcp

kernel32

GlobalFree WriteFile CloseHandle Sleep LocalFree LockResource GlobalAlloc LoadResource SizeofResource FindResourceA GetModuleHandleA GetStartupInfoA CreateFileA

user32

LoadIconA IsIconic GetSystemMetrics GetClientRect DrawIcon SendMessageA GetSystemMenu AppendMenuA EnableWindow

advapi32

RegSetValueExA SetNamedSecurityInfoA SetEntriesInAclA BuildExplicitAccessWithNameA GetNamedSecurityInfoA RegCreateKeyA RegOpenKeyExA RegCloseKey RegQueryValueExA RegOpenKeyA

shell32

ShellExecuteA