jaffacakes118_Trojan-GameThief[.]Win32[.]Magania[.]fdee[.]f2dec928950b4a2fe647cf65fbd407a5

General

Target
jaffacakes118_Trojan-GameThief.Win32.Magania.fdee.f2dec928950b4a2fe647cf65fbd407a5
Size 148KB
Sample261006-t5mnmsdw2j
SHA256 9a6ac9c52e2f9dd2fe02462e9219e374c68a673ec480d350dab3c53e72fd214a
MD5 f2dec928950b4a2fe647cf65fbd407a5
SHA1 179ef64705894bc27ff1b671f27baa7340650b06
SHA512 26c8d47a51f0fe26fd0fd8ac411ddba299d00df1fc7914cef093b0dd78aaa274428729e8d31d54d2a014411ad3cd9f1eb958495187012c6fcdd62a3d2f620855
SSDEEP 3072:cUqYW8TOt7UvapdtDcex9/2lVvy/whjLwBDrk:clYWIGUCpdtDPIlFGwhvwBX
TLSH
T18CE37C117AD050BAE0F6013C68E97F379B7BACB44A558C47B73489892CB5A49DB32F43
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-GameThief.Win32.Magania.fdee.f2dec928950b4a2fe647cf65fbd407a5

File Explorer

jaffacakes118_Trojan-GameThief.Win32.Magania.fdee.f2dec928950b4a2fe647cf65fbd407a5

.exe 148KB

jaffacakes118_Trojan-GameThief.Win32.Magania.fdee.f2dec928950b4a2fe647cf65fbd407a5

IMPHASH 3a9231516a8ecb11fa9eef937e3640f4
SHA256 9a6ac9c52e2f9dd2fe02462e9219e374c68a673ec480d350dab3c53e72fd214a
MD5 f2dec928950b4a2fe647cf65fbd407a5
SHA1 179ef64705894bc27ff1b671f27baa7340650b06
SHA512 26c8d47a51f0fe26fd0fd8ac411ddba299d00df1fc7914cef093b0dd78aaa274428729e8d31d54d2a014411ad3cd9f1eb958495187012c6fcdd62a3d2f620855
SSDEEP 3072:cUqYW8TOt7UvapdtDcex9/2lVvy/whjLwBDrk:clYWIGUCpdtDPIlFGwhvwBX
TLSH
T18CE37C117AD050BAE0F6013C68E97F379B7BACB44A558C47B73489892CB5A49DB32F43
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6044

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegSetValueExA RegOpenKeyA RegCreateKeyExA StartServiceA ControlService ChangeServiceConfigA OpenServiceA OpenSCManagerA

user32

wsprintfA

kernel32

CloseHandle FreeResource Sleep WriteFile CreateFileA DeleteFileA LockResource GetProcAddress LoadLibraryA GetModuleFileNameA WaitForSingleObject CreateEventA ExitProcess WinExec lstrlenA SetFilePointer GetWindowsDirectoryA GetTickCount GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion HeapAlloc GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue GetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType DeleteCriticalSection GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree HeapFree RtlUnwind VirtualAlloc HeapReAlloc InitializeCriticalSection EnterCriticalSection LeaveCriticalSection InterlockedDecrement InterlockedIncrement GetCPInfo GetACP GetOEMCP SetStdHandle MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers

Sharing