jaffacakes118_Trojan-Dropper[.]Win32[.]Dorifel[.]ahef[.]d7769f8cdc24b99ff640de1432a51c02

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Dropper.Win32.Dorifel.ahef.d7769f8cdc24b99ff640de1432a51c02
Size 6.2MB
Sample261009-w6hr7ade83
SHA256 6b1e70fa52c783bdac085b789657d9ac6e7fd40ab883f8762f764bd25ba32d9a
MD5 d7769f8cdc24b99ff640de1432a51c02
SHA1 0d1e96f637450bb26803ee46e73b846fd229fda3
SHA512 c8edf0fda67780027a68763828030811eef71adabdbd39dde46db8628d13181cc3c9136b5684e79346a40db1c69a3453029f214748a816fd9e94f8f3c56003ce
SSDEEP 196608:BANYNpY9/rZao3bvkrj8rz5Z3ysNBd6G6x3LqRAg7cuQ+:BANYNparZaojkczRwGRLBP
TLSH
T1595633173791E1F3C10351764F96CB7BD2B6B2604A66861337C8160EFEA1A63A339763
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Dorifel.ahef.d7769f8cdc24b99ff640de1432a51c02

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Dorifel.ahef.d7769f8cdc24b99ff640de1432a51c02

.exe 6.2MB

jaffacakes118_Trojan-Dropper.Win32.Dorifel.ahef.d7769f8cdc24b99ff640de1432a51c02

IMPHASH 85c1978bffcdb8412337d4f28204783c
SHA256 6b1e70fa52c783bdac085b789657d9ac6e7fd40ab883f8762f764bd25ba32d9a
MD5 d7769f8cdc24b99ff640de1432a51c02
SHA1 0d1e96f637450bb26803ee46e73b846fd229fda3
SHA512 c8edf0fda67780027a68763828030811eef71adabdbd39dde46db8628d13181cc3c9136b5684e79346a40db1c69a3453029f214748a816fd9e94f8f3c56003ce
SSDEEP 196608:BANYNpY9/rZao3bvkrj8rz5Z3ysNBd6G6x3LqRAg7cuQ+:BANYNparZaojkczRwGRLBP
TLSH
T1595633173791E1F3C10351764F96CB7BD2B6B2604A66861337C8160EFEA1A63A339763
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

208713

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\haozip4.0Beta1\rczip\bin\Win32\release\pdb\HaoZip7zSetup.pdb

comctl32

InitCommonControlsEx

shell32

SHBrowseForFolderW SHGetSpecialFolderLocation SHGetFileInfoW CommandLineToArgvW ShellExecuteW ShellExecuteExW SHGetPathFromIDListW SHGetMalloc

kernel32

CreateFileA FreeLibrary GetProcessHeap HeapAlloc GetLastError GetProcAddress HeapFree LoadLibraryW GetModuleFileNameW LocalFree WaitForSingleObject CreateProcessW SetCurrentDirectoryW GetCurrentDirectoryW CloseHandle SetFileApisToOEM GetCurrentThread SetPriorityClass GetEnvironmentVariableW SetThreadPriority GetCurrentProcess GetModuleHandleW GetVersionExW CreateFileW ExpandEnvironmentStringsW GetCommandLineW DeleteFileW GetFileAttributesW RemoveDirectoryW CreateDirectoryW FindFirstFileW FindClose FindNextFileW FormatMessageW InterlockedExchangeAdd SetEndOfFile SetFileTime WriteFile SetFilePointer GetFileSize ReadFile GetACP MultiByteToWideChar EnterCriticalSection DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection GetTempPathW GetFullPathNameW GetWindowsDirectoryW GetTempFileNameW SetFileAttributesW GetLongPathNameW MoveFileW lstrlenW CreateEventW SetEvent ResetEvent FindResourceW FileTimeToSystemTime SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA GetStringTypeW GetStringTypeA GetLocaleInfoA LoadLibraryA HeapReAlloc VirtualAlloc FlushFileBuffers GetConsoleMode GetConsoleCP LCMapStringW LCMapStringA GetCurrentProcessId GetTickCount QueryPerformanceCounter VirtualFree HeapCreate HeapDestroy GetStartupInfoA WideCharToMultiByte WaitForMultipleObjects ResumeThread GetFileType SetHandleCount GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA IsValidCodePage TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime GetVersionExA GetStartupInfoW ExitThread GetCurrentThreadId CreateThread RaiseException RtlUnwind GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement Sleep HeapSize ExitProcess GetStdHandle GetModuleFileNameA GetCPInfo GetOEMCP

user32

IsDialogMessageW CreateDialogParamW SetTimer LoadIconW ScreenToClient TranslateMessage IsWindowVisible GetMessageW PostQuitMessage DestroyIcon IsWindow MessageBoxW ShowWindow PostMessageW DialogBoxParamW SetWindowPos GetWindowRect GetSystemMetrics GetDlgItem SendMessageW EndDialog SetFocus GetWindowTextW SetWindowTextW DispatchMessageW GetActiveWindow GetDesktopWindow LoadStringW KillTimer EnableWindow

gdi32

CreateSolidBrush DeleteObject

ole32

CoUninitialize CoTaskMemFree CoInitializeEx CoCreateInstance CoInitialize