jaffacakes118_Trojan-Dropper[.]Win32[.]Daws[.]bcxj[.]4cffccb509e235784082879f73d3e9c6

General

Target
jaffacakes118_Trojan-Dropper.Win32.Daws.bcxj.4cffccb509e235784082879f73d3e9c6
Size 140KB
Sample261009-whrees1ydv
SHA256 3c7fff0c77735afac6d18edd65f4e87d46b1ae6a74d178f7df2239de1b0df5fc
MD5 4cffccb509e235784082879f73d3e9c6
SHA1 d14158982622ef1784c4641428a0e517e535ffa4
SHA512 298e851cef0d110f5bb39c364fc4dc17b0c2571970393e2228deeb4d4e5199a6246779b43f9680b7dd78ed3c7d69ab3faa6efb6970cbf1c1f44b4063816395b6
SSDEEP 3072:Vf6VO879G/9zwlA26J/oyf1BU40EejIN7XB3RrGT1+Z7QjVE:ViE8BGFi62yf1BU48IlXBZq1+xYE
TLSH
T177E3F11A7C5B5133E84144314AF0C2C60BBDFE2327A269EFDF9495151EF5EA889392B3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Daws.bcxj.4cffccb509e235784082879f73d3e9c6

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Daws.bcxj.4cffccb509e235784082879f73d3e9c6

.exe 140KB

jaffacakes118_Trojan-Dropper.Win32.Daws.bcxj.4cffccb509e235784082879f73d3e9c6

IMPHASH f7e74345c2c8cf121761c7653f56cee3
SHA256 3c7fff0c77735afac6d18edd65f4e87d46b1ae6a74d178f7df2239de1b0df5fc
MD5 4cffccb509e235784082879f73d3e9c6
SHA1 d14158982622ef1784c4641428a0e517e535ffa4
SHA512 298e851cef0d110f5bb39c364fc4dc17b0c2571970393e2228deeb4d4e5199a6246779b43f9680b7dd78ed3c7d69ab3faa6efb6970cbf1c1f44b4063816395b6
SSDEEP 3072:Vf6VO879G/9zwlA26J/oyf1BU40EejIN7XB3RrGT1+Z7QjVE:ViE8BGFi62yf1BU48IlXBZq1+xYE
TLSH
T177E3F11A7C5B5133E84144314AF0C2C60BBDFE2327A269EFDF9495151EF5EA889392B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11687

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcessHeap VirtualAlloc VirtualProtect VirtualFree HeapAlloc HeapFree FreeLibrary SetEnvironmentVariableA CompareStringW GetTickCount LoadLibraryA GetProcAddress FindResourceA SizeofResource LoadResource LockResource IsBadReadPtr GetCurrentProcess GetTimeZoneInformation GetSystemTime GetLocalTime HeapReAlloc GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess GetModuleFileNameA GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue GetLastError TerminateProcess HeapSize UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType WriteFile SetFilePointer InterlockedDecrement InterlockedIncrement GetCPInfo GetACP GetOEMCP SetStdHandle MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CloseHandle CompareStringA

user32

MessageBoxA

advapi32

CryptCreateHash CryptHashData CryptDeriveKey CryptDecrypt OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges CryptAcquireContextA

Sharing