jaffacakes118_Trojan-Dropper[.]Win32[.]Agent[.]za[.]fa26e07facf6bb0f59a53ec32fb461fc

General

Target
jaffacakes118_Trojan-Dropper.Win32.Agent.za.fa26e07facf6bb0f59a53ec32fb461fc
Size 172KB
Sample261009-v1237shx6k
SHA256 f889bbab47a92f9ca39d0153ac0d71b915cb7af3cd7ed7c435aac2f3df5974ad
MD5 fa26e07facf6bb0f59a53ec32fb461fc
SHA1 d063d59efc950c162ac82e10a7cca88e37366200
SHA512 11d2c2841b7c10203cde42ff3c700850fe7b7e7367ef4248557e5ace109e39828f086323ccfae7dc45216df626097ee1b7457f904de6f856eca4bf8c18925e2e
SSDEEP 3072:ggOJxjzXJ6hQ2mGLjXHRfUTx7CQKY2u3LTcxIegwG6fFP4OP:lOJxjzXJt2BLREx2wU9y6XP
TLSH
T1E50402237C700CABD566CAF60E8825BEDB7F683A1F5091D7DF200BBD0D266D14E2419A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Agent.za.fa26e07facf6bb0f59a53ec32fb461fc

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Agent.za.fa26e07facf6bb0f59a53ec32fb461fc

.exe 172KB

jaffacakes118_Trojan-Dropper.Win32.Agent.za.fa26e07facf6bb0f59a53ec32fb461fc

IMPHASH ae312c3dd899660b3aa1588cb4e0b3f1
SHA256 f889bbab47a92f9ca39d0153ac0d71b915cb7af3cd7ed7c435aac2f3df5974ad
MD5 fa26e07facf6bb0f59a53ec32fb461fc
SHA1 d063d59efc950c162ac82e10a7cca88e37366200
SHA512 11d2c2841b7c10203cde42ff3c700850fe7b7e7367ef4248557e5ace109e39828f086323ccfae7dc45216df626097ee1b7457f904de6f856eca4bf8c18925e2e
SSDEEP 3072:ggOJxjzXJ6hQ2mGLjXHRfUTx7CQKY2u3LTcxIegwG6fFP4OP:lOJxjzXJt2BLREx2wU9y6XP
TLSH
T1E50402237C700CABD566CAF60E8825BEDB7F683A1F5091D7DF200BBD0D266D14E2419A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

SHGetValueA PathFileExistsA SHSetValueA

kernel32

GetStartupInfoA InterlockedExchange Sleep GetTickCount CloseHandle WaitForSingleObject CreateProcessA WriteFile SizeofResource CreateFileA LockResource LoadResource FindResourceA GetModuleFileNameA GetSystemDirectoryA GetCommandLineA MoveFileExA DeleteFileA CreateDirectoryA GetWindowsDirectoryA FreeLibrary ExitProcess GetModuleHandleA GetVersion SetLastError GetProcAddress TerminateProcess OpenProcess ReadFile GetFileSize

user32

CharToOemA

msvcrt

_controlfp ??1type_info@@UAE@XZ printf fclose strlen fread fgetc fseek fopen free fwrite memcpy malloc memset fprintf strchr strrchr fputs strcat sprintf __CxxFrameHandler memmove ??2@YAPAXI@Z _mbsrchr strstr strncpy strtok strcpy memcmp _CxxThrowException ??0exception@@QAE@ABV0@@Z ??1exception@@UAE@XZ ??0exception@@QAE@XZ _exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3

Sharing