jaffacakes118_Trojan-Dropper[.]Win32[.]Injector[.]pcqn[.]70a6f140994b379edc2170af0a4ae452

General

Target
jaffacakes118_Trojan-Dropper.Win32.Injector.pcqn.70a6f140994b379edc2170af0a4ae452
Size 10KB
Sample261009-xtkxfsty3k
SHA256 243a27b04c779453d7edab118ce21aa14868738b6187542900ac58932ad07e7d
MD5 70a6f140994b379edc2170af0a4ae452
SHA1 9da800e1448735edfdfbaa808873886552417243
SHA512 6aa50780b83838edaa2f5833fff706d8f48fb04c4f55f005b6df29bd69588d9ea25d21f60e5bd0ca8524d29cbedf0b63352353c12644734ff158b8ce1201d396
SSDEEP 192:Wsl3XeWSw1xObqns04jgWFc4yR3Zk5vk04zw4cHGTp61oyMl:rZXeW5O2T4j8XRGdk04zLcA61y
TLSH
T1D722E72FDE38D8A3C58400F007BFAB3EDE7759164238A77B570CC9990AD4647D96618B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Injector.pcqn.70a6f140994b379edc2170af0a4ae452

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Injector.pcqn.70a6f140994b379edc2170af0a4ae452

.exe 10KB

jaffacakes118_Trojan-Dropper.Win32.Injector.pcqn.70a6f140994b379edc2170af0a4ae452

IMPHASH 6c0ad8c12fcf6322a69554705d4d3168
SHA256 243a27b04c779453d7edab118ce21aa14868738b6187542900ac58932ad07e7d
MD5 70a6f140994b379edc2170af0a4ae452
SHA1 9da800e1448735edfdfbaa808873886552417243
SHA512 6aa50780b83838edaa2f5833fff706d8f48fb04c4f55f005b6df29bd69588d9ea25d21f60e5bd0ca8524d29cbedf0b63352353c12644734ff158b8ce1201d396
SSDEEP 192:Wsl3XeWSw1xObqns04jgWFc4yR3Zk5vk04zw4cHGTp61oyMl:rZXeW5O2T4j8XRGdk04zLcA61y
TLSH
T1D722E72FDE38D8A3C58400F007BFAB3EDE7759164238A77B570CC9990AD4647D96618B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8166

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoA Sleep GetCommandLineA CreateMutexA ReleaseMutex SetUnhandledExceptionFilter CreateDirectoryA ReadFile GetLastError lstrcatA DeleteFileA SetLastError lstrcpyA FreeLibrary GetWindowsDirectoryA LoadLibraryA GetProcAddress FindResourceA CreateFileA SetFileTime SizeofResource lstrlenA GetCurrentProcess Process32First Process32Next lstrcmpiA ExitProcess GetCurrentThreadId GetModuleHandleA

user32

GetInputState wsprintfA ShowWindow

advapi32

RegCloseKey OpenSCManagerA OpenServiceA StartServiceA CreateServiceA CloseServiceHandle RegOpenKeyExA RegSaveKeyA RegCreateKeyExA RegRestoreKeyA RegSetValueExA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegDeleteKeyA RegDeleteValueA

msvcrt

_exit _strnset _strcmpi strtok ??2@YAPAXI@Z memset memcpy strchr _except_handler3 __CxxFrameHandler realloc malloc strlen ??3@YAXPAX@Z strstr ??1type_info@@UAE@XZ _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp

Sharing