jaffacakes118_Trojan-Dropper[.]Win32[.]Injector[.]pcim[.]88946a026e76132c06d4ba7f9bf5c385

General

Target
jaffacakes118_Trojan-Dropper.Win32.Injector.pcim.88946a026e76132c06d4ba7f9bf5c385
Size 139KB
Sample261009-xth3vsty2r
SHA256 af5628f612b8bc36a4a706a231988132baccbe439c4c618952e9d58314f01255
MD5 88946a026e76132c06d4ba7f9bf5c385
SHA1 202cf772fab3537231e230fb958eaacb265e3593
SHA512 4f1fcce37d2bd8e3118e354122cd3b2ed21b17c6dab4b9ffd321909649cc0ef1954031fcf6199aa46b7c17742fcc94199004b39337642ac44be61de6be4b7d24
SSDEEP 3072:IVePhpGzwt5ZHoGN+UDSKoUKhfC8WzrJ6QnEzpaJjFsRal4e:IAhpGkN+UxBK1C80rJ5EdSl4
TLSH
T105D37C4DE6CB8B21CD85C47575726A4AA72685300538335E79703EBA1BF3AD30B2E397
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Injector.pcim.88946a026e76132c06d4ba7f9bf5c385

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Injector.pcim.88946a026e76132c06d4ba7f9bf5c385

.exe 139KB

jaffacakes118_Trojan-Dropper.Win32.Injector.pcim.88946a026e76132c06d4ba7f9bf5c385

IMPHASH 2c6eeffb0fade5679b1298a82e902372
SHA256 af5628f612b8bc36a4a706a231988132baccbe439c4c618952e9d58314f01255
MD5 88946a026e76132c06d4ba7f9bf5c385
SHA1 202cf772fab3537231e230fb958eaacb265e3593
SHA512 4f1fcce37d2bd8e3118e354122cd3b2ed21b17c6dab4b9ffd321909649cc0ef1954031fcf6199aa46b7c17742fcc94199004b39337642ac44be61de6be4b7d24
SSDEEP 3072:IVePhpGzwt5ZHoGN+UDSKoUKhfC8WzrJ6QnEzpaJjFsRal4e:IAhpGkN+UxBK1C80rJ5EdSl4
TLSH
T105D37C4DE6CB8B21CD85C47575726A4AA72685300538335E79703EBA1BF3AD30B2E397
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11979

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA VerLanguageNameA GlobalAlloc lstrlenA CloseHandle GetLastError OpenMutexA GetCommandLineA GetTickCount GetVersion GetProcAddress LoadLibraryA FreeLibrary RaiseException SetEnvironmentVariableA CompareStringW CompareStringA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar GetOEMCP WaitForSingleObject GetEnvironmentStrings GetACP GetCPInfo IsBadCodePtr IsBadReadPtr GetTimeZoneInformation GetSystemTime GetLocalTime GetSystemTimeAsFileTime RtlUnwind GetStartupInfoA ExitProcess HeapAlloc WideCharToMultiByte HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate VirtualFree WriteFile VirtualAlloc HeapReAlloc IsBadWritePtr SetUnhandledExceptionFilter HeapSize

user32

MessageBoxA IsWindowVisible PostMessageA GetDesktopWindow GetSysColor wsprintfA GetScrollRange CreatePopupMenu GetSubMenu InsertMenuItemA

gdi32

CreateSolidBrush

comdlg32

ChooseColorA

shlwapi

PathAppendA

Sharing