jaffacakes118_Trojan-Dropper[.]Win32[.]Agent[.]mh[.]f88b061acb0c58441264a7997f2fc277

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Dropper.Win32.Agent.mh.f88b061acb0c58441264a7997f2fc277
Size 279KB
Sample261006-th2jaaz16j
SHA256 4c6cf803f3e9603d657da4280d45d8431a017be6794c65141210e18fa32fb8b0
MD5 f88b061acb0c58441264a7997f2fc277
SHA1 8fb19d187ac641c0af742e1c47b47cecf5785598
SHA512 aa9791fe54cd82a6c0cbdb0b187ca258af34dc0695f9a4e97ea7416b1e0cdec64401066d19e9eb153b235c82a1a5295b67e3fc6f430cda5ffbb0de3bed580520
SSDEEP 6144:pS/o6cnioVzjKEtCvmNelhXSjxkFR4X2JCu:wtG0VSK7E2j
TLSH
T186541243E4E0E877EC10DAB54E4252F44B3BD62B8DCED4A1DB61A468DCB634C660F6C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Agent.mh.f88b061acb0c58441264a7997f2fc277

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Agent.mh.f88b061acb0c58441264a7997f2fc277

.exe 279KB

jaffacakes118_Trojan-Dropper.Win32.Agent.mh.f88b061acb0c58441264a7997f2fc277

SHA256 4c6cf803f3e9603d657da4280d45d8431a017be6794c65141210e18fa32fb8b0
MD5 f88b061acb0c58441264a7997f2fc277
SHA1 8fb19d187ac641c0af742e1c47b47cecf5785598
SHA512 aa9791fe54cd82a6c0cbdb0b187ca258af34dc0695f9a4e97ea7416b1e0cdec64401066d19e9eb153b235c82a1a5295b67e3fc6f430cda5ffbb0de3bed580520
SSDEEP 6144:pS/o6cnioVzjKEtCvmNelhXSjxkFR4X2JCu:wtG0VSK7E2j
TLSH
T186541243E4E0E877EC10DAB54E4252F44B3BD62B8DCED4A1DB61A468DCB634C660F6C9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15772

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

204B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

920B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

263KB

Virtual Size

262KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Agent.mh.f88b061acb0c58441264a7997f2fc277

generic