jaffacakes118_Trojan-Dropper[.]Win32[.]Agent[.]bjtemf[.]e7d0929ab7cde7b1430a48ce9ec7b554

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Dropper.Win32.Agent.bjtemf.e7d0929ab7cde7b1430a48ce9ec7b554
Size 1.3MB
Sample261006-std2paas2t
SHA256 85cd22c7c610b1668b3f340829e2f4dc29580e907f2d71b4185d12dd59b8d82d
MD5 e7d0929ab7cde7b1430a48ce9ec7b554
SHA1 8870990f7b4d79b77d915b20342856bed577ae33
SHA512 b07b7076da324eb6ea82656f8591adac2cf736a680e9daeca03437856d0c51c6df560bcb5007c3d54e4fec0bb391d32b92bfd64000364da2f89b11c88ae011b4
SSDEEP 24576:0NF3nLZFpLqTawnEahvhxNEXg83zuMgRe7KpKv9eM:01vWmm/vhxNuORe739z
TLSH
T106558C11F6D28A32D4B3123145FB4B661A39E6614F449AD363A4B5AC0DA67D03E3B3FC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Agent.bjtemf.e7d0929ab7cde7b1430a48ce9ec7b554

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Agent.bjtemf.e7d0929ab7cde7b1430a48ce9ec7b554

.exe 1.3MB

jaffacakes118_Trojan-Dropper.Win32.Agent.bjtemf.e7d0929ab7cde7b1430a48ce9ec7b554

IMPHASH b07615a46f365259861c8102fc235a08
SHA256 85cd22c7c610b1668b3f340829e2f4dc29580e907f2d71b4185d12dd59b8d82d
MD5 e7d0929ab7cde7b1430a48ce9ec7b554
SHA1 8870990f7b4d79b77d915b20342856bed577ae33
SHA512 b07b7076da324eb6ea82656f8591adac2cf736a680e9daeca03437856d0c51c6df560bcb5007c3d54e4fec0bb391d32b92bfd64000364da2f89b11c88ae011b4
SSDEEP 24576:0NF3nLZFpLqTawnEahvhxNEXg83zuMgRe7KpKv9eM:01vWmm/vhxNuORe739z
TLSH
T106558C11F6D28A32D4B3123145FB4B661A39E6614F449AD363A4B5AC0DA67D03E3B3FC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

416919

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileAttributesA InterlockedIncrement InterlockedDecrement IsBadWritePtr lstrlenW FatalAppExitA DebugBreak lstrcpyW FreeResource FindResourceW LoadResource GetCurrentProcess SizeofResource GetConsoleWindow GetFileAttributesW GetModuleFileNameW GetLongPathNameW LockResource CloseHandle GetFileSize _llseek WriteFile ReadFile CreateFileW VirtualFree FreeLibrary WaitForSingleObject CreateRemoteThread InitializeCriticalSection OpenProcess VirtualFreeEx LoadLibraryW ReadProcessMemory LeaveCriticalSection GetProcAddress VirtualAlloc EnterCriticalSection VirtualAllocEx OpenThread GetExitCodeThread GetSystemInfo DeleteCriticalSection GetCurrentThreadId WriteProcessMemory SetFilePointer GetCurrentThread TerminateThread Sleep SuspendThread ResumeThread SystemTimeToTzSpecificLocalTime GetTickCount TzSpecificLocalTimeToSystemTime GetTimeZoneInformation AllocConsole ReadConsoleA FlushConsoleInputBuffer SetConsoleMode GetConsoleOutputCP GetStdHandle SetConsoleCtrlHandler SetConsoleWindowInfo SetConsoleTitleW GetCurrentProcessId LocalFree HeapAlloc HeapFree GetProcessHeap IsBadReadPtr SetLastError LoadLibraryA VirtualProtect GetCPInfo GetOEMCP IsValidCodePage GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW EncodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetFullPathNameW HeapReAlloc GetStringTypeW ExitThread CreateThread RtlUnwind GetTimeFormatW GetDateFormatW GetSystemTimeAsFileTime DuplicateHandle CreateProcessA DeleteFileW MoveFileW SetStdHandle InitializeCriticalSectionAndSpinCount GetFileType CreateProcessW RaiseException TlsAlloc TlsGetValue TlsSetValue TlsFree GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale LCMapStringW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount HeapCreate QueryPerformanceCounter GetConsoleCP GetConsoleMode FlushFileBuffers CompareStringW IsProcessorFeaturePresent CreateFileA CreatePipe GetExitCodeProcess HeapSize WriteConsoleW GetCurrentDirectoryW GetDriveTypeW SetEndOfFile SetEnvironmentVariableA SetEnvironmentVariableW GetLastError MultiByteToWideChar WideCharToMultiByte FormatMessageA GetModuleFileNameA GetModuleHandleA SetErrorMode GetNativeSystemInfo GetACP

user32

WinHelpA MapWindowPoints IsWindow IsWindowVisible EqualRect GetActiveWindow LoadIconA RegisterClassA GetClientRect ShowWindow DefWindowProcA SetWindowPos GetSystemMenu SetActiveWindow IsIconic ModifyMenuA GetWindowThreadProcessId GetMessageW TranslateMessage PeekMessageW DispatchMessageW SendMessageA SetForegroundWindow MessageBoxW SetWindowRgn GetWindowRect wsprintfA SetFocus OffsetRect IntersectRect MessageBoxA GetWindowLongA CreateWindowExA CallWindowProcA

ole32

OleRegGetUserType CreateOleAdviseHolder CoTaskMemAlloc OleCreate OleSetContainedObject StringFromIID CLSIDFromString CLSIDFromProgID CoRegisterClassObject CoRevokeClassObject MkParseDisplayName CreateBindCtx CoCreateInstance CoLockObjectExternal StringFromCLSID OleInitialize OleUninitialize CoTaskMemFree

shlwapi

SHDeleteKeyA StrFormatByteSizeW

gdi32

SetViewportOrgEx SetWindowOrgEx DeleteObject CreateRectRgnIndirect SetViewportExtEx SetWindowExtEx SetMapMode

advapi32

RegQueryValueExA RegSetValueExA RegCreateKeyExA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegCloseKey RegEnumKeyExA RegOpenKeyExA

shell32

ord165

oleaut32

SysFreeString UnRegisterTypeLi GetActiveObject VariantInit VariantCopyInd VariantClear LoadTypeLibEx SysAllocStringLen LoadRegTypeLi LHashValOfNameSys SafeArrayCreateVector VariantTimeToSystemTime SafeArrayAccessData VariantCopy SafeArrayDestroy SafeArrayCreate SystemTimeToVariantTime SafeArrayGetDim VariantChangeType SafeArrayGetElement SafeArrayUnaccessData SafeArrayPutElement DispGetIDsOfNames SysStringLen