jaffacakes118_Trojan-Spy[.]Win32[.]AutoHK[.]ok[.]409fa8d0c77a8aeb6a79280451413e16

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Spy.Win32.AutoHK.ok.409fa8d0c77a8aeb6a79280451413e16
Size 803KB
Sample261006-vm4pwasvav
SHA256 d1fa4e38dd67bc431e2e34db6a4fcc821728c6d9ee6fb0bdb941bab0303057e3
MD5 409fa8d0c77a8aeb6a79280451413e16
SHA1 190abb8fb32d8d229f5b6e3f594d22a4545fc593
SHA512 d94019eecedd05d270213d6b58faade4c1811959f9c985a3f6b3a00915d477b577043e6b67ca847c5dbec436a54ebb5e8026b565337bfb40b23bd49163a8cb59
SSDEEP 24576:h08VtNvq4dGSrUsZi4r65iAA0BCyC/VavRBkTFO:+2anbqVav8TI
TLSH
T156056C53B3C3C0B2DF9225F2D67953361D3DB928073CA5DB7390292DE990AC26AB9315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Spy.Win32.AutoHK.ok.409fa8d0c77a8aeb6a79280451413e16

File Explorer

jaffacakes118_Trojan-Spy.Win32.AutoHK.ok.409fa8d0c77a8aeb6a79280451413e16

.exe 803KB

jaffacakes118_Trojan-Spy.Win32.AutoHK.ok.409fa8d0c77a8aeb6a79280451413e16

IMPHASH dcdb4df40210534551e68c8254201ff3
SHA256 d1fa4e38dd67bc431e2e34db6a4fcc821728c6d9ee6fb0bdb941bab0303057e3
MD5 409fa8d0c77a8aeb6a79280451413e16
SHA1 190abb8fb32d8d229f5b6e3f594d22a4545fc593
SHA512 d94019eecedd05d270213d6b58faade4c1811959f9c985a3f6b3a00915d477b577043e6b67ca847c5dbec436a54ebb5e8026b565337bfb40b23bd49163a8cb59
SSDEEP 24576:h08VtNvq4dGSrUsZi4r65iAA0BCyC/VavRBkTFO:+2anbqVav8TI
TLSH
T156056C53B3C3C0B2DF9225F2D67953361D3DB928073CA5DB7390292DE990AC26AB9315
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

595027

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wsock32

WSACleanup inet_addr gethostbyname gethostname WSAStartup

winmm

mixerSetControlDetails waveOutGetVolume joyGetPosEx mixerGetControlDetailsW mixerOpen mixerGetDevCapsW mixerGetLineControlsW waveOutSetVolume mixerClose mciSendStringW joyGetDevCapsW mixerGetLineInfoW

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

comctl32

ImageList_Create CreateStatusWindowW ImageList_ReplaceIcon InitCommonControlsEx ImageList_GetIconSize ImageList_Destroy ImageList_AddMasked

psapi

GetModuleBaseNameW GetModuleFileNameExW

kernel32

FindFirstFileW FindNextFileW FindClose FileTimeToLocalFileTime SetEnvironmentVariableW Beep MoveFileW OutputDebugStringW CreateProcessW GetFileAttributesW WideCharToMultiByte MultiByteToWideChar GetExitCodeProcess WriteProcessMemory ReadProcessMemory GetCurrentProcessId OpenProcess TerminateProcess SetPriorityClass SetLastError GetEnvironmentVariableW GetLocalTime GetDateFormatW GetTimeFormatW GetDiskFreeSpaceW SetVolumeLabelW CreateFileW DeviceIoControl GetDriveTypeW GetVolumeInformationW CreateDirectoryW ReadFile WriteFile DeleteFileW SetFileAttributesW LocalFileTimeToFileTime SetFileTime GetFileSizeEx GetSystemTime GetSystemDefaultUILanguage GetComputerNameW GetWindowsDirectoryW GetTempPathW LockResource GetShortPathNameW EnterCriticalSection LeaveCriticalSection VirtualProtect QueryDosDeviceW CompareStringW RemoveDirectoryW CopyFileW GetCurrentProcess FormatMessageW GetPrivateProfileStringW GetPrivateProfileSectionW GetPrivateProfileSectionNamesW WritePrivateProfileStringW WritePrivateProfileSectionW SetEndOfFile GetACP GetFileType GetStdHandle SetFilePointerEx SystemTimeToFileTime FileTimeToSystemTime GetFileSize VirtualAllocEx VirtualFreeEx EnumResourceNamesW LoadLibraryExW GlobalSize GetOEMCP InterlockedDecrement InterlockedIncrement GetStartupInfoW HeapSetInformation GetCommandLineW HeapQueryInformation HeapSize HeapReAlloc HeapFree ExitProcess HeapAlloc TlsFree UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate InitializeCriticalSectionAndSpinCount LoadResource SizeofResource FindResourceW GetSystemTimeAsFileTime GetModuleFileNameW DeleteCriticalSection GetCPInfo GetVersionExW FreeLibrary LoadLibraryW GetModuleHandleW GetProcAddress GetLastError CreateMutexW CloseHandle GetExitCodeThread SetThreadPriority CreateThread GetStringTypeExW lstrcmpiW GetCurrentThreadId GlobalUnlock GlobalFree GlobalAlloc GlobalLock GetCurrentDirectoryW SetErrorMode InitializeCriticalSection SetCurrentDirectoryW Sleep GetTickCount MulDiv IsValidCodePage TlsAlloc TlsGetValue SetHandleCount IsProcessorFeaturePresent GetStringTypeW LCMapStringW RaiseException RtlUnwind GetConsoleCP GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter TlsSetValue SetFilePointer FlushFileBuffers WriteConsoleW SetStdHandle GetProcessHeap GetFullPathNameW VirtualQuery

user32

GetMenuItemCount GetMenuItemID GetSubMenu GetMenuStringW ExitWindowsEx SetMenu FlashWindow GetPropW SetPropW RemovePropW MapWindowPoints RedrawWindow SetParent GetClassInfoExW GetAncestor UpdateWindow GetMessagePos GetClassLongW DefDlgProcW CallWindowProcW CheckRadioButton IntersectRect GetUpdateRect PtInRect CreateDialogIndirectParamW CreateAcceleratorTableW DestroyAcceleratorTable InsertMenuItemW SetMenuDefaultItem RemoveMenu SetMenuItemInfoW IsMenu GetMenuItemInfoW CreateMenu CreatePopupMenu SetMenuInfo AppendMenuW DestroyMenu TrackPopupMenuEx GetDesktopWindow CopyImage CreateIconIndirect CreateIconFromResourceEx EnumClipboardFormats GetWindow BringWindowToTop GetTopWindow IsWindowVisible CheckMenuItem MessageBoxW LoadImageW ChangeClipboardChain GetSystemMenu LoadAcceleratorsW GetMenu CreateWindowExW RegisterClassExW LoadCursorW DestroyIcon DestroyWindow IsCharAlphaW MapVirtualKeyW VkKeyScanExW GetSysColor GetKeyboardLayoutNameW ActivateKeyboardLayout GetGUIThreadInfo GetWindowTextW mouse_event WindowFromPoint GetSystemMetrics keybd_event SetKeyboardState GetKeyboardState GetCursorPos GetAsyncKeyState AttachThreadInput SendInput UnregisterHotKey RegisterHotKey PostQuitMessage SendMessageTimeoutW UnhookWindowsHookEx SetWindowsHookExW PostThreadMessageW IsCharAlphaNumericW IsCharUpperW IsCharLowerW ToUnicodeEx GetKeyboardLayout CallNextHookEx CharLowerW ReleaseDC GetDC OpenClipboard GetClipboardData GetClipboardFormatNameW CloseClipboard SetClipboardData EmptyClipboard PostMessageW FindWindowW EndDialog IsWindow DispatchMessageW TranslateMessage GetLastInputInfo GetCursor ClientToScreen MessageBeep SetDlgItemTextW GetDlgItem SendDlgItemMessageW DialogBoxParamW SetForegroundWindow DefWindowProcW FillRect DrawIconEx SetClipboardViewer GetSysColorBrush ShowWindow CountClipboardFormats SetWindowLongW ScreenToClient IsDialogMessageW SendMessageW IsWindowEnabled GetWindowLongW GetKeyState TranslateAcceleratorW RegisterWindowMessageW IsIconic IsZoomed EnumWindows GetWindowTextLengthW EnableWindow InvalidateRect SetLayeredWindowAttributes SetWindowPos SetWindowRgn SetFocus SetActiveWindow EnumChildWindows MoveWindow GetQueueStatus GetWindowRect GetClientRect SystemParametersInfoW AdjustWindowRectEx DrawTextW SetRect KillTimer PeekMessageW GetFocus GetClassNameW GetWindowThreadProcessId GetForegroundWindow GetMessageW SetTimer GetParent GetDlgCtrlID CharUpperW IsClipboardFormatAvailable GetIconInfo MapVirtualKeyExW SetWindowTextW EnableMenuItem

gdi32

GetPixel GetClipRgn GetCharABCWidthsW SetBkMode CreatePatternBrush SetBrushOrgEx EnumFontFamiliesExW CreateDIBSection GdiFlush SetBkColor ExcludeClipRect SetTextColor GetClipBox BitBlt CreateCompatibleBitmap GetSystemPaletteEntries GetDIBits CreateCompatibleDC CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateEllipticRgn DeleteDC GetObjectW GetTextMetricsW GetTextFaceW SelectObject GetStockObject CreateDCW CreateSolidBrush CreateFontW FillRgn GetDeviceCaps DeleteObject

comdlg32

CommDlgExtendedError GetSaveFileNameW GetOpenFileNameW

advapi32

RegDeleteKeyW RegSetValueExW RegCreateKeyExW RegQueryValueExW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken CloseServiceHandle UnlockServiceDatabase LockServiceDatabase OpenSCManagerW GetUserNameW RegEnumKeyExW RegEnumValueW RegQueryInfoKeyW RegOpenKeyExW RegCloseKey RegConnectRegistryW RegDeleteValueW

shell32

DragQueryPoint SHEmptyRecycleBinW SHFileOperationW SHGetPathFromIDListW SHBrowseForFolderW SHGetDesktopFolder SHGetMalloc SHGetFolderPathW ShellExecuteExW Shell_NotifyIconW DragFinish DragQueryFileW ExtractIconW

ole32

OleInitialize OleUninitialize CoCreateInstance CoInitialize CoUninitialize CLSIDFromString CoGetObject StringFromGUID2 CreateStreamOnHGlobal

oleaut32

SafeArrayGetLBound GetActiveObject OleLoadPicture SafeArrayUnaccessData SafeArrayGetElemsize SafeArrayAccessData SafeArrayUnlock SafeArrayPtrOfIndex SafeArrayLock SafeArrayGetDim SafeArrayDestroy SafeArrayGetUBound VariantCopyInd SafeArrayCopy SysAllocString VariantChangeType VariantClear SafeArrayCreate SysFreeString SysStringLen