jaffacakes118_Trojan-Dropper[.]Win32[.]Agent[.]oa[.]ec7d0c681591e75a86a5f2bc954d006a

General

Target
jaffacakes118_Trojan-Dropper.Win32.Agent.oa.ec7d0c681591e75a86a5f2bc954d006a
Size 3.8MB
Sample261006-tkd6rs1ydt
SHA256 6484ae6bc36529a87c2da7d483b141ae88d4d289d8c53f6dfb0e5eddbdecd995
MD5 ec7d0c681591e75a86a5f2bc954d006a
SHA1 600d5d49c64d0051f9804a12300f26c44c0b9d1d
SHA512 6db921c3b3b86b6091a63a84f948b179acdcd1f03464b27570ee3944b1853ec6124bf1635a6b3cc0e3ed9e1456a8da284d9fbedbd46b437f051da2c39ca8209f
SSDEEP 49152:vqrNUvL6RQRYYKQaf5DOs3Hl8MD/NmRyui8TQpmYP+t+NJXt8vQVEL:vqrNymx3Hl8MTNmKpmYP+t+NJXtFEL
TLSH
T14F06E102E690807AE18901F251B3133A6B35AE1103119ACB5BB8FED57F365E17F3A75B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Agent.oa.ec7d0c681591e75a86a5f2bc954d006a

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Agent.oa.ec7d0c681591e75a86a5f2bc954d006a

.exe 3.8MB

jaffacakes118_Trojan-Dropper.Win32.Agent.oa.ec7d0c681591e75a86a5f2bc954d006a

IMPHASH 34f8f6f48beca22461e1f9592f52f8c4
SHA256 6484ae6bc36529a87c2da7d483b141ae88d4d289d8c53f6dfb0e5eddbdecd995
MD5 ec7d0c681591e75a86a5f2bc954d006a
SHA1 600d5d49c64d0051f9804a12300f26c44c0b9d1d
SHA512 6db921c3b3b86b6091a63a84f948b179acdcd1f03464b27570ee3944b1853ec6124bf1635a6b3cc0e3ed9e1456a8da284d9fbedbd46b437f051da2c39ca8209f
SSDEEP 49152:vqrNUvL6RQRYYKQaf5DOs3Hl8MD/NmRyui8TQpmYP+t+NJXt8vQVEL:vqrNymx3Hl8MTNmKpmYP+t+NJXtFEL
TLSH
T14F06E102E690807AE18901F251B3133A6B35AE1103119ACB5BB8FED57F365E17F3A75B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

30144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

netapi32

NetShareDel NetShareAdd

kernel32

FileTimeToLocalFileTime FindFirstFileA TerminateProcess OpenProcess GetProcAddress LoadLibraryA FreeLibrary CloseHandle MultiByteToWideChar SetFileAttributesA RemoveDirectoryA CreateDirectoryA GetWindowsDirectoryA GetSystemDirectoryA LockResource SizeofResource FileTimeToSystemTime FindResourceA GetModuleHandleA CreateProcessA GetExitCodeProcess WaitForSingleObject CreatePipe DeleteFileA ExpandEnvironmentStringsA GetDiskFreeSpaceExA GetModuleFileNameA SetEndOfFile ReadFile CreateFileA GetFileAttributesA FindNextFileA GetLastError FindClose SetCurrentDirectoryA Sleep AllocConsole GetStdHandle SetConsoleCtrlHandler GetVersionExA SetEnvironmentVariableA GetCurrentDirectoryA LoadResource GetStringTypeW GetStringTypeA HeapFree HeapAlloc SetStdHandle GetFileType RtlUnwind ExitProcess GetCurrentProcess GetStartupInfoA GetCommandLineA GetVersion GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc IsBadWritePtr SetHandleCount WriteFile GetCPInfo GetACP GetOEMCP UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW FlushFileBuffers SetFilePointer SetUnhandledExceptionFilter IsBadReadPtr IsBadCodePtr LCMapStringA LCMapStringW

advapi32

ControlService RegDeleteKeyA RegCreateKeyExA RegSetValueExA EnumServicesStatusA DeleteService StartServiceA OpenSCManagerA OpenServiceA CloseServiceHandle RegQueryInfoKeyA RegEnumKeyExA RegEnumValueA RegOpenKeyExA RegDeleteValueA RegCloseKey

shell32

ShellExecuteA

Sharing