jaffacakes118_Trojan-Dropper[.]Win32[.]Flystud[.]adt[.]9e339c1a15d6ffe4519cb92acfffae74

General

Target
jaffacakes118_Trojan-Dropper.Win32.Flystud.adt.9e339c1a15d6ffe4519cb92acfffae74
Size 1.1MB
Sample261009-xcbbpadf72
SHA256 7f1f6e65a76b466f7096d984337cb0d705027abb2d8ef53f0b7f2baf5a3506a0
MD5 9e339c1a15d6ffe4519cb92acfffae74
SHA1 e4fc96d7099b904cf4d2ed20f081870294164d91
SHA512 9743fa15b48332f51be44399538747329f8e1d18506bd181da0501e7023d40559332ca968d4d0212035f044797535979e2dea965c5d0805fb21cdc6eda8db866
SSDEEP 24576:3gkARYvw/d4pka37Boy9jAuhzBjjgjWK2sYMnZ3aT9YU:vpZrBbAuxBjck7
TLSH
T1783533E6BF4F2D8AD1B23A32B04A92B7D7BBB9743DB1D28259C89C571C42F501864713
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Flystud.adt.9e339c1a15d6ffe4519cb92acfffae74

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Flystud.adt.9e339c1a15d6ffe4519cb92acfffae74

.exe 1.1MB

jaffacakes118_Trojan-Dropper.Win32.Flystud.adt.9e339c1a15d6ffe4519cb92acfffae74

IMPHASH d02b258601410d6bdc58dda2cbe5f615
SHA256 7f1f6e65a76b466f7096d984337cb0d705027abb2d8ef53f0b7f2baf5a3506a0
MD5 9e339c1a15d6ffe4519cb92acfffae74
SHA1 e4fc96d7099b904cf4d2ed20f081870294164d91
SHA512 9743fa15b48332f51be44399538747329f8e1d18506bd181da0501e7023d40559332ca968d4d0212035f044797535979e2dea965c5d0805fb21cdc6eda8db866
SSDEEP 24576:3gkARYvw/d4pka37Boy9jAuhzBjjgjWK2sYMnZ3aT9YU:vpZrBbAuxBjck7
TLSH
T1783533E6BF4F2D8AD1B23A32B04A92B7D7BBB9743DB1D28259C89C571C42F501864713
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10273

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

_lcreat _llseek _lread GetTempPathA GetSystemDefaultLangID DeleteFileA _lwrite SetCurrentDirectoryA CreateDirectoryA GetDiskFreeSpaceA lstrcatA WritePrivateProfileStringA CreateProcessA CloseHandle _lopen _lclose lstrlenA TerminateProcess GetCurrentProcess GetStringTypeA LCMapStringW GetStringTypeW MultiByteToWideChar LoadLibraryA LCMapStringA GetOEMCP GetACP GetProcAddress WriteFile RtlUnwind GetCPInfo GetStdHandle SetHandleCount GetFileType GetEnvironmentStrings lstrcpyA GetEnvironmentStringsW GetModuleFileNameA GetLastError FreeEnvironmentStringsA UnhandledExceptionFilter FreeEnvironmentStringsW HeapReAlloc VirtualAlloc HeapCreate GetPrivateProfileStringA lstrcmpA HeapFree HeapAlloc ExitProcess WideCharToMultiByte HeapDestroy VirtualFree GetFileAttributesA GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion

user32

LoadCursorA RegisterClassA RegisterClassExA UpdateWindow LoadIconA LoadStringA CreateWindowExA ShowWindow GetClientRect SendMessageA GetWindowRect wsprintfA DefWindowProcA MessageBoxA BeginPaint MsgWaitForMultipleObjects PeekMessageA DestroyWindow DrawTextA EndPaint GetMessageA PostQuitMessage PostMessageA GetDesktopWindow TranslateMessage DispatchMessageA

gdi32

SelectObject GetDeviceCaps SetBkMode CreateFontA

comctl32

ord17

Sharing