jaffacakes118_Trojan[.]Win32[.]Buzus[.]fenj[.]615f5c17465d3ed80f87adfa370ec96a

General

Target
jaffacakes118_Trojan.Win32.Buzus.fenj.615f5c17465d3ed80f87adfa370ec96a
Size 190KB
Sample261006-vy2dwsbv2s
SHA256 19ee26c31686963100d066c6bbdea5ba70744a53877daf00d4f405c393f614f8
MD5 615f5c17465d3ed80f87adfa370ec96a
SHA1 40dd45c296693df1f4dee1cae1307d4cca4b06a9
SHA512 fd0887de5400bf17796f3bfcfab4c31aaf98a6eb14783b6c252d20dfdc68605f393a584c79d9dd18ed4f146f24c933a4d9ab5c15c9e5729cae56d3621ed1d9af
SSDEEP 3072:Uai+BsU2sBqCuS/P/O19UuuG2qJ1YnTZbSuzVywZ+Sb83rJHPYhcOYOFFAfNkF3Q:UOBsU2sAiWYnTZWKVywZ+SbwrJH2+WFg
TLSH
T1F414121A6121BCA7F1874D7C110D653AADFE21332E15697E6AD1E83B623C0D7867EB03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Buzus.fenj.615f5c17465d3ed80f87adfa370ec96a

File Explorer

jaffacakes118_Trojan.Win32.Buzus.fenj.615f5c17465d3ed80f87adfa370ec96a

.exe 190KB

jaffacakes118_Trojan.Win32.Buzus.fenj.615f5c17465d3ed80f87adfa370ec96a

IMPHASH 827e7e7639e7557849a4bdb2ac54dbfe
SHA256 19ee26c31686963100d066c6bbdea5ba70744a53877daf00d4f405c393f614f8
MD5 615f5c17465d3ed80f87adfa370ec96a
SHA1 40dd45c296693df1f4dee1cae1307d4cca4b06a9
SHA512 fd0887de5400bf17796f3bfcfab4c31aaf98a6eb14783b6c252d20dfdc68605f393a584c79d9dd18ed4f146f24c933a4d9ab5c15c9e5729cae56d3621ed1d9af
SSDEEP 3072:Uai+BsU2sBqCuS/P/O19UuuG2qJ1YnTZbSuzVywZ+Sb83rJHPYhcOYOFFAfNkF3Q:UOBsU2sAiWYnTZWKVywZ+SbwrJH2+WFg
TLSH
T1F414121A6121BCA7F1874D7C110D653AADFE21332E15697E6AD1E83B623C0D7867EB03
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12429

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

EndDialog PostQuitMessage EndPaint BeginPaint DefWindowProcA DestroyWindow DialogBoxParamA UpdateWindow ShowWindow CreateWindowExA RegisterClassExA LoadCursorA LoadIconA DispatchMessageA TranslateMessage TranslateAcceleratorA GetMessageA LoadAcceleratorsA LoadStringA MessageBoxA

kernel32

InterlockedIncrement GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA GetLocaleInfoA HeapSize RtlUnwind HeapReAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW GetVolumeInformationW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree GetProcessHeap QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc VirtualAlloc VirtualProtect GetCurrentThread GetThreadTimes CreateThread SetThreadPriority WaitForSingleObject CloseHandle CreateFileA

advapi32

CryptAcquireContextA CryptCreateHash CryptHashData CryptGetHashParam CryptDestroyHash CryptReleaseContext

Sharing