jaffacakes118_Trojan-Spy[.]Win32[.]AutoHK[.]of[.]fce1bf2beb4bbbdda955fd32a5c86e72

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Spy.Win32.AutoHK.of.fce1bf2beb4bbbdda955fd32a5c86e72
Size 2.0MB
Sample261006-vmz2pasvat
SHA256 c69008d44a22049c2fe3b63bac1ba4dfc3b4a9d9efc28faa0dcc96b2304e2d96
MD5 fce1bf2beb4bbbdda955fd32a5c86e72
SHA1 8f2aadc1d98a66e5d663d69c720efa88278b157d
SHA512 37a99c1e1aa9244f7d65538f4b29566191b946ded9e62ce5306a0b62623b44bc0150dcdd56830ee56d3ec731ca1225018a459a7754212cafe116a4f99a9bb84a
SSDEEP 49152:m2anbqVav8TdxEC42XvI+Curyv1MN+CoSqxpl0W:NauVavtMy0+7SqaW
TLSH
T1B0A59D87B392C1F1DFA251F2C53512329A31BC21173C9ADB62D07A2DDFB26D19A36721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Spy.Win32.AutoHK.of.fce1bf2beb4bbbdda955fd32a5c86e72

File Explorer

jaffacakes118_Trojan-Spy.Win32.AutoHK.of.fce1bf2beb4bbbdda955fd32a5c86e72

.exe 2.0MB

jaffacakes118_Trojan-Spy.Win32.AutoHK.of.fce1bf2beb4bbbdda955fd32a5c86e72

IMPHASH dcdb4df40210534551e68c8254201ff3
SHA256 c69008d44a22049c2fe3b63bac1ba4dfc3b4a9d9efc28faa0dcc96b2304e2d96
MD5 fce1bf2beb4bbbdda955fd32a5c86e72
SHA1 8f2aadc1d98a66e5d663d69c720efa88278b157d
SHA512 37a99c1e1aa9244f7d65538f4b29566191b946ded9e62ce5306a0b62623b44bc0150dcdd56830ee56d3ec731ca1225018a459a7754212cafe116a4f99a9bb84a
SSDEEP 49152:m2anbqVav8TdxEC42XvI+Curyv1MN+CoSqxpl0W:NauVavtMy0+7SqaW
TLSH
T1B0A59D87B392C1F1DFA251F2C53512329A31BC21173C9ADB62D07A2DDFB26D19A36721
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

595027

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wsock32

WSACleanup inet_addr gethostbyname gethostname WSAStartup

winmm

mixerSetControlDetails waveOutGetVolume joyGetPosEx mixerGetControlDetailsW mixerOpen mixerGetDevCapsW mixerGetLineControlsW waveOutSetVolume mixerClose mciSendStringW joyGetDevCapsW mixerGetLineInfoW

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

comctl32

ImageList_Create CreateStatusWindowW ImageList_ReplaceIcon InitCommonControlsEx ImageList_GetIconSize ImageList_Destroy ImageList_AddMasked

psapi

GetModuleBaseNameW GetModuleFileNameExW

kernel32

FindFirstFileW FindNextFileW FindClose FileTimeToLocalFileTime SetEnvironmentVariableW Beep MoveFileW OutputDebugStringW CreateProcessW GetFileAttributesW WideCharToMultiByte MultiByteToWideChar GetExitCodeProcess WriteProcessMemory ReadProcessMemory GetCurrentProcessId OpenProcess TerminateProcess SetPriorityClass SetLastError GetEnvironmentVariableW GetLocalTime GetDateFormatW GetTimeFormatW GetDiskFreeSpaceW SetVolumeLabelW CreateFileW DeviceIoControl GetDriveTypeW GetVolumeInformationW CreateDirectoryW ReadFile WriteFile DeleteFileW SetFileAttributesW LocalFileTimeToFileTime SetFileTime GetFileSizeEx GetSystemTime GetSystemDefaultUILanguage GetComputerNameW GetWindowsDirectoryW GetTempPathW LockResource GetShortPathNameW EnterCriticalSection LeaveCriticalSection VirtualProtect QueryDosDeviceW CompareStringW RemoveDirectoryW CopyFileW GetCurrentProcess FormatMessageW GetPrivateProfileStringW GetPrivateProfileSectionW GetPrivateProfileSectionNamesW WritePrivateProfileStringW WritePrivateProfileSectionW SetEndOfFile GetACP GetFileType GetStdHandle SetFilePointerEx SystemTimeToFileTime FileTimeToSystemTime GetFileSize VirtualAllocEx VirtualFreeEx EnumResourceNamesW LoadLibraryExW GlobalSize GetOEMCP InterlockedDecrement InterlockedIncrement GetStartupInfoW HeapSetInformation GetCommandLineW HeapQueryInformation HeapSize HeapReAlloc HeapFree ExitProcess HeapAlloc TlsFree UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate InitializeCriticalSectionAndSpinCount LoadResource SizeofResource FindResourceW GetSystemTimeAsFileTime GetModuleFileNameW DeleteCriticalSection GetCPInfo GetVersionExW FreeLibrary LoadLibraryW GetModuleHandleW GetProcAddress GetLastError CreateMutexW CloseHandle GetExitCodeThread SetThreadPriority CreateThread GetStringTypeExW lstrcmpiW GetCurrentThreadId GlobalUnlock GlobalFree GlobalAlloc GlobalLock GetCurrentDirectoryW SetErrorMode InitializeCriticalSection SetCurrentDirectoryW Sleep GetTickCount MulDiv IsValidCodePage TlsAlloc TlsGetValue SetHandleCount IsProcessorFeaturePresent GetStringTypeW LCMapStringW RaiseException RtlUnwind GetConsoleCP GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter TlsSetValue SetFilePointer FlushFileBuffers WriteConsoleW SetStdHandle GetProcessHeap GetFullPathNameW VirtualQuery

user32

GetMenuItemCount GetMenuItemID GetSubMenu GetMenuStringW ExitWindowsEx SetMenu FlashWindow GetPropW SetPropW RemovePropW MapWindowPoints RedrawWindow SetParent GetClassInfoExW GetAncestor UpdateWindow GetMessagePos GetClassLongW DefDlgProcW CallWindowProcW CheckRadioButton IntersectRect GetUpdateRect PtInRect CreateDialogIndirectParamW CreateAcceleratorTableW DestroyAcceleratorTable InsertMenuItemW SetMenuDefaultItem RemoveMenu SetMenuItemInfoW IsMenu GetMenuItemInfoW CreateMenu CreatePopupMenu SetMenuInfo AppendMenuW DestroyMenu TrackPopupMenuEx GetDesktopWindow CopyImage CreateIconIndirect CreateIconFromResourceEx EnumClipboardFormats GetWindow BringWindowToTop GetTopWindow IsWindowVisible CheckMenuItem MessageBoxW LoadImageW ChangeClipboardChain GetSystemMenu LoadAcceleratorsW GetMenu CreateWindowExW RegisterClassExW LoadCursorW DestroyIcon DestroyWindow IsCharAlphaW MapVirtualKeyW VkKeyScanExW GetSysColor GetKeyboardLayoutNameW ActivateKeyboardLayout GetGUIThreadInfo GetWindowTextW mouse_event WindowFromPoint GetSystemMetrics keybd_event SetKeyboardState GetKeyboardState GetCursorPos GetAsyncKeyState AttachThreadInput SendInput UnregisterHotKey RegisterHotKey PostQuitMessage SendMessageTimeoutW UnhookWindowsHookEx SetWindowsHookExW PostThreadMessageW IsCharAlphaNumericW IsCharUpperW IsCharLowerW ToUnicodeEx GetKeyboardLayout CallNextHookEx CharLowerW ReleaseDC GetDC OpenClipboard GetClipboardData GetClipboardFormatNameW CloseClipboard SetClipboardData EmptyClipboard PostMessageW FindWindowW EndDialog IsWindow DispatchMessageW TranslateMessage GetLastInputInfo GetCursor ClientToScreen MessageBeep SetDlgItemTextW GetDlgItem SendDlgItemMessageW DialogBoxParamW SetForegroundWindow DefWindowProcW FillRect DrawIconEx SetClipboardViewer GetSysColorBrush ShowWindow CountClipboardFormats SetWindowLongW ScreenToClient IsDialogMessageW SendMessageW IsWindowEnabled GetWindowLongW GetKeyState TranslateAcceleratorW RegisterWindowMessageW IsIconic IsZoomed EnumWindows GetWindowTextLengthW EnableWindow InvalidateRect SetLayeredWindowAttributes SetWindowPos SetWindowRgn SetFocus SetActiveWindow EnumChildWindows MoveWindow GetQueueStatus GetWindowRect GetClientRect SystemParametersInfoW AdjustWindowRectEx DrawTextW SetRect KillTimer PeekMessageW GetFocus GetClassNameW GetWindowThreadProcessId GetForegroundWindow GetMessageW SetTimer GetParent GetDlgCtrlID CharUpperW IsClipboardFormatAvailable GetIconInfo MapVirtualKeyExW SetWindowTextW EnableMenuItem

gdi32

GetPixel GetClipRgn GetCharABCWidthsW SetBkMode CreatePatternBrush SetBrushOrgEx EnumFontFamiliesExW CreateDIBSection GdiFlush SetBkColor ExcludeClipRect SetTextColor GetClipBox BitBlt CreateCompatibleBitmap GetSystemPaletteEntries GetDIBits CreateCompatibleDC CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateEllipticRgn DeleteDC GetObjectW GetTextMetricsW GetTextFaceW SelectObject GetStockObject CreateDCW CreateSolidBrush CreateFontW FillRgn GetDeviceCaps DeleteObject

comdlg32

CommDlgExtendedError GetSaveFileNameW GetOpenFileNameW

advapi32

RegDeleteKeyW RegSetValueExW RegCreateKeyExW RegQueryValueExW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken CloseServiceHandle UnlockServiceDatabase LockServiceDatabase OpenSCManagerW GetUserNameW RegEnumKeyExW RegEnumValueW RegQueryInfoKeyW RegOpenKeyExW RegCloseKey RegConnectRegistryW RegDeleteValueW

shell32

DragQueryPoint SHEmptyRecycleBinW SHFileOperationW SHGetPathFromIDListW SHBrowseForFolderW SHGetDesktopFolder SHGetMalloc SHGetFolderPathW ShellExecuteExW Shell_NotifyIconW DragFinish DragQueryFileW ExtractIconW

ole32

OleInitialize OleUninitialize CoCreateInstance CoInitialize CoUninitialize CLSIDFromString CoGetObject StringFromGUID2 CreateStreamOnHGlobal

oleaut32

SafeArrayGetLBound GetActiveObject OleLoadPicture SafeArrayUnaccessData SafeArrayGetElemsize SafeArrayAccessData SafeArrayUnlock SafeArrayPtrOfIndex SafeArrayLock SafeArrayGetDim SafeArrayDestroy SafeArrayGetUBound VariantCopyInd SafeArrayCopy SysAllocString VariantChangeType VariantClear SafeArrayCreate SysFreeString SysStringLen