jaffacakes118_Trojan-Dropper[.]Win32[.]Agent[.]cafx[.]4a5214f4728a86a4370e63f9e87bc1e7

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Dropper.Win32.Agent.cafx.4a5214f4728a86a4370e63f9e87bc1e7
Size 1.1MB
Sample261006-szxe8aat2t
SHA256 514f67fb543abf14603c70e6587d335009e496152bec99c1084f3e50a40a8cb5
MD5 4a5214f4728a86a4370e63f9e87bc1e7
SHA1 1bb04b9494259c762f4ba2988743eed9b27bec6a
SHA512 fe1bcb1a7c2e8523abb0f28a6b794e246683e746c3fc6093d48f083234b3658bba87aec593c2d55fbca98533f409029ab7640bf4dfd77ab8dd4c59b392c50e1f
SSDEEP 12288:bTMrNFb/yJzhHRyrFRj0Xv2272+5E5LopG1Tn7dvEIiVCiNWs6Ugb8nA57+HId2T:PoyJVR4ROu27tpkhs7NWFUSHHLs/B
TLSH
T1D8357BA8B762CC93F44140347029D7B0D5615E5A183AF6A2BDC77E4F37B92006A78E7B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Agent.cafx.4a5214f4728a86a4370e63f9e87bc1e7

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Agent.cafx.4a5214f4728a86a4370e63f9e87bc1e7

.exe 1.1MB

jaffacakes118_Trojan-Dropper.Win32.Agent.cafx.4a5214f4728a86a4370e63f9e87bc1e7

IMPHASH 792717a66ba02dab776b6f06254768dd
SHA256 514f67fb543abf14603c70e6587d335009e496152bec99c1084f3e50a40a8cb5
MD5 4a5214f4728a86a4370e63f9e87bc1e7
SHA1 1bb04b9494259c762f4ba2988743eed9b27bec6a
SHA512 fe1bcb1a7c2e8523abb0f28a6b794e246683e746c3fc6093d48f083234b3658bba87aec593c2d55fbca98533f409029ab7640bf4dfd77ab8dd4c59b392c50e1f
SSDEEP 12288:bTMrNFb/yJzhHRyrFRj0Xv2272+5E5LopG1Tn7dvEIiVCiNWs6Ugb8nA57+HId2T:PoyJVR4ROu27tpkhs7NWFUSHHLs/B
TLSH
T1D8357BA8B762CC93F44140347029D7B0D5615E5A183AF6A2BDC77E4F37B92006A78E7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

712116

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvfw32

DrawDibDraw

avifil32

AVIStreamGetFrame AVIStreamInfoA

winmm

midiStreamClose midiStreamRestart midiStreamOut midiOutPrepareHeader midiStreamProperty midiStreamOpen midiOutUnprepareHeader waveOutOpen waveOutGetNumDevs waveOutClose waveOutReset waveOutWrite waveOutPrepareHeader waveOutUnprepareHeader PlaySoundA midiOutReset midiStreamStop waveOutPause

ws2_32

accept getpeername recv ioctlsocket recvfrom WSAAsyncSelect closesocket WSACleanup inet_ntoa

kernel32

lstrcpynA DuplicateHandle FileTimeToLocalFileTime LockFile UnlockFile SetEndOfFile GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA lstrcmpA LocalAlloc TlsAlloc GlobalHandle TlsFree TlsSetValue LocalReAlloc TlsGetValue GetFileTime GetCurrentThread GlobalFlags SetErrorMode GetProcessVersion GetCPInfo GetOEMCP GetStartupInfoA RtlUnwind GetSystemTime GetLocalTime RaiseException HeapSize GetACP UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree SetEnvironmentVariableA LCMapStringA LCMapStringW VirtualAlloc IsBadWritePtr SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW CompareStringA CompareStringW IsBadReadPtr IsBadCodePtr SetStdHandle FileTimeToSystemTime LocalFree InterlockedDecrement InterlockedIncrement lstrcmpiA GetVersion GetTimeZoneInformation SetLastError OpenProcess TerminateProcess GetFileSize SetFilePointer CreateToolhelp32Snapshot Process32First Process32Next WideCharToMultiByte MultiByteToWideChar GetCurrentProcess GetWindowsDirectoryA GetSystemDirectoryA CreateSemaphoreA ResumeThread ReleaseSemaphore EnterCriticalSection LeaveCriticalSection GetProfileStringA WriteFile ReadFile GetLastError WaitForMultipleObjects CreateFileA SetEvent FindResourceA LoadResource LockResource RemoveDirectoryA GetModuleFileNameA GetCurrentThreadId ExitProcess GlobalSize GlobalFree DeleteCriticalSection InitializeCriticalSection lstrcatA WinExec lstrcpyA FindNextFileA GlobalReAlloc HeapFree HeapReAlloc GetProcessHeap HeapAlloc GetFullPathNameA FreeLibrary LoadLibraryA lstrlenA GetVersionExA WritePrivateProfileStringA CreateThread CreateEventA Sleep ExpandEnvironmentStringsA GlobalAlloc GlobalLock GlobalUnlock GetTempPathA FindFirstFileA FindClose SetFileAttributesA GetFileAttributesA MoveFileA DeleteFileA CopyFileA CreateDirectoryA SetCurrentDirectoryA GetVolumeInformationA GetModuleHandleA GetProcAddress MulDiv GetCommandLineA GetTickCount WaitForSingleObject CloseHandle InterlockedExchange FlushFileBuffers

user32

GetMenuCheckMarkDimensions SetMenuItemBitmaps CheckMenuItem IsDialogMessageA ScrollWindowEx SendDlgItemMessageA MapWindowPoints AdjustWindowRectEx GetScrollPos RegisterClassA CreateWindowExA GetClassLongA RemovePropA GetMessageTime GetLastActivePopup RegisterWindowMessageA GetWindowPlacement EndDialog CreateDialogIndirectParamA DestroyWindow EndPaint BeginPaint CharUpperA GetSysColorBrush GetWindowTextLengthA EnumThreadWindows FindWindowExA GetDlgItem FindWindowA GetWindowThreadProcessId GetClassNameA GetDesktopWindow GetForegroundWindow GetNextDlgTabItem GetWindowTextA SetWindowTextA GetMenuItemCount GetMenuItemID GetMenuStringA GetMenuState GetTabbedTextExtentA DrawStateA GrayStringA TabbedTextOutA WindowFromDC EnumChildWindows GetWindowDC UnhookWindowsHookEx CallNextHookEx SetWindowsHookExA FrameRect GetPropA MoveWindow CallWindowProcA SetPropA DrawTextA GetCursor SystemParametersInfoA TranslateMessage LoadIconA DrawFrameControl DrawEdge DrawFocusRect WindowFromPoint GetMessageA DispatchMessageA SetRectEmpty CreateIconFromResourceEx CreateIconFromResource DrawIconEx CreatePopupMenu AppendMenuA ModifyMenuA CreateMenu CreateAcceleratorTableA GetDlgCtrlID GetSubMenu EnableMenuItem ClientToScreen EnumDisplaySettingsA LoadImageA ShowWindow IsWindowEnabled TranslateAcceleratorA GetKeyState CopyAcceleratorTableA PostQuitMessage IsZoomed GetSystemMenu DeleteMenu GetClassInfoA DefWindowProcA GetMenu SetMenu PeekMessageA IsIconic SetFocus GetActiveWindow GetWindow DestroyAcceleratorTable SetWindowRgn GetMessagePos ScreenToClient ChildWindowFromPointEx LoadBitmapA WinHelpA KillTimer SetTimer ReleaseCapture GetCapture SetCapture GetScrollRange SetScrollRange SetScrollPos InflateRect SetRect IntersectRect DestroyIcon PtInRect OffsetRect IsWindowVisible EnableWindow RedrawWindow GetWindowLongA SetWindowLongA GetSysColor SetActiveWindow SetCursorPos LoadCursorA SetCursor GetDC FillRect IsRectEmpty ReleaseDC IsChild TrackPopupMenu DestroyMenu SetForegroundWindow GetWindowRect EqualRect UpdateWindow ValidateRect InvalidateRect GetClientRect GetFocus GetParent GetTopWindow PostMessageA IsWindow SetParent DestroyCursor SendMessageA SetWindowPos MessageBoxA GetCursorPos GetSystemMetrics EmptyClipboard SetClipboardData OpenClipboard GetClipboardData CloseClipboard wsprintfA RegisterClipboardFormatA LoadStringA CopyRect UnregisterClassA

gdi32

PatBlt CreatePen GetObjectA SelectObject CreatePatternBrush CreateBitmap CreateBrushIndirect CreateDCA CreateCompatibleBitmap GetPolyFillMode GetStretchBltMode GetROP2 GetBkColor GetBkMode GetTextColor CreateRoundRectRgn Escape SetDIBitsToDevice LineTo MoveToEx CreateEllipticRgnIndirect ExtTextOutA SetPolyFillMode SetROP2 SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx GetClipBox ExcludeClipRect FillRgn ExtSelectClipRgn GetViewportExtEx SetTextColor SetBkMode SetBkColor CreateRectRgnIndirect CreateDIBSection SetPixel SetStretchBltMode GetClipRgn CreatePolygonRgn SelectClipRgn DeleteObject CreateDIBitmap GetSystemPaletteEntries CreatePalette StretchBlt SelectPalette RealizePalette GetDIBits GetWindowExtEx GetViewportOrgEx GetWindowOrgEx BeginPath EndPath PathToRegion CreateEllipticRgn TextOutA RectVisible PtVisible GetPixel CreateCompatibleDC SetPixelV Ellipse Rectangle LPtoDP DPtoLP GetCurrentObject RoundRect CreatePenIndirect RestoreDC SaveDC CreateRectRgn Arc CombineRgn CreateSolidBrush GetStockObject CreateFontIndirectA EndPage EndDoc DeleteDC StartDocA StartPage GetTextExtentPoint32A BitBlt GetTextMetricsA GetDeviceCaps SetWindowOrgEx

msimg32

GradientFill

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

comdlg32

GetFileTitleA ChooseColorA ChooseFontA GetOpenFileNameA GetSaveFileNameA

advapi32

RegCreateKeyExA RegQueryValueA RegDeleteKeyA RegDeleteValueA RegCreateKeyA RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey

shell32

SHGetSpecialFolderPathA DragQueryFileA ShellExecuteA Shell_NotifyIconA SHGetMalloc SHGetPathFromIDListA SHBrowseForFolderA

ole32

ReleaseStgMedium RegisterDragDrop OleInitialize CoCreateInstance OleUninitialize CLSIDFromString RevokeDragDrop

oleaut32

UnRegisterTypeLi RegisterTypeLi LoadTypeLi

comctl32

ImageList_SetBkColor ImageList_GetIcon ord17 ImageList_GetImageCount _TrackMouseEvent ImageList_GetImageInfo ImageList_Draw ImageList_Destroy ImageList_Create ImageList_Read ImageList_DrawIndirect ImageList_Duplicate ImageList_AddMasked

wldap32

ord29