jaffacakes118_Trojan-Dropper[.]Win32[.]Injector[.]pcqn[.]7fe8b3d4776f17acb5613bc8ab570c36

General

Target
jaffacakes118_Trojan-Dropper.Win32.Injector.pcqn.7fe8b3d4776f17acb5613bc8ab570c36
Size 10KB
Sample261009-xtmfaadt4w
SHA256 4bae6f5cd909300048bf5cbd5d0560232db0927967d7b4203fce13e3669c9d47
MD5 7fe8b3d4776f17acb5613bc8ab570c36
SHA1 e627c10cfa1723c4b9c6d8406a90fd4aaee38322
SHA512 feb6b32e9f9bd36382b8576b39051ffb579ea4323fcc60c5ecc5b11add063d45d311cfca43f2c767b299f1d06cd16ffd7a6ad626ac0b6020eaad5072fb608eee
SSDEEP 192:Wsl3XeWSw1xObqns04jgWFc4yR3Zk5vk04zw4cHGTp61oyMl:PZXeW5O2T4j8XRGdk04zLcA61y
TLSH
T1EE22E62FDE38D8A3C58400F007AEAB3EDE7759164238A7BB570CC9490AD4647D96618B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Injector.pcqn.7fe8b3d4776f17acb5613bc8ab570c36

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Injector.pcqn.7fe8b3d4776f17acb5613bc8ab570c36

.exe 10KB

jaffacakes118_Trojan-Dropper.Win32.Injector.pcqn.7fe8b3d4776f17acb5613bc8ab570c36

IMPHASH 6c0ad8c12fcf6322a69554705d4d3168
SHA256 4bae6f5cd909300048bf5cbd5d0560232db0927967d7b4203fce13e3669c9d47
MD5 7fe8b3d4776f17acb5613bc8ab570c36
SHA1 e627c10cfa1723c4b9c6d8406a90fd4aaee38322
SHA512 feb6b32e9f9bd36382b8576b39051ffb579ea4323fcc60c5ecc5b11add063d45d311cfca43f2c767b299f1d06cd16ffd7a6ad626ac0b6020eaad5072fb608eee
SSDEEP 192:Wsl3XeWSw1xObqns04jgWFc4yR3Zk5vk04zw4cHGTp61oyMl:PZXeW5O2T4j8XRGdk04zLcA61y
TLSH
T1EE22E62FDE38D8A3C58400F007AEAB3EDE7759164238A7BB570CC9490AD4647D96618B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8166

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoA Sleep GetCommandLineA CreateMutexA ReleaseMutex SetUnhandledExceptionFilter CreateDirectoryA ReadFile GetLastError lstrcatA DeleteFileA SetLastError lstrcpyA FreeLibrary GetWindowsDirectoryA LoadLibraryA GetProcAddress FindResourceA CreateFileA SetFileTime SizeofResource lstrlenA GetCurrentProcess Process32First Process32Next lstrcmpiA ExitProcess GetCurrentThreadId GetModuleHandleA

user32

GetInputState wsprintfA ShowWindow

advapi32

RegCloseKey OpenSCManagerA OpenServiceA StartServiceA CreateServiceA CloseServiceHandle RegOpenKeyExA RegSaveKeyA RegCreateKeyExA RegRestoreKeyA RegSetValueExA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegDeleteKeyA RegDeleteValueA

msvcrt

_exit _strnset _strcmpi strtok ??2@YAPAXI@Z memset memcpy strchr _except_handler3 __CxxFrameHandler realloc malloc strlen ??3@YAXPAX@Z strstr ??1type_info@@UAE@XZ _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp

Sharing