jaffacakes118_Trojan-Dropper[.]Win32[.]Injector[.]pcqn[.]f5b0d6a651d38a8b279c4897675d9f38

General

Target
jaffacakes118_Trojan-Dropper.Win32.Injector.pcqn.f5b0d6a651d38a8b279c4897675d9f38
Size 10KB
Sample261009-xtvrnaswaz
SHA256 cff377faee4e3f73ba3ff30f496d4aac83530b6485dd909a34d1034b4f4148b8
MD5 f5b0d6a651d38a8b279c4897675d9f38
SHA1 36c6ac142293691b80aa2aa4abd0cee3241ebca0
SHA512 f883220cbf02d8e0742349102df75c2d0f662fe8952af7c1d726f85063339b6edecee669e225c6022c2784337c069cd7a0b91258b65e2df98c0051c414d2c4ff
SSDEEP 192:W5l3XeWSw1xObqns04jgWFc4yR3Zk5vk04zw4cHGTp61oyMl:yZXeW5O2T4j8XRGdk04zLcA61y
TLSH
T12022D62FDE38D8A3C58440F007AFAB3EDE7799164238A7BB570CC9490AD4647D96618B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Injector.pcqn.f5b0d6a651d38a8b279c4897675d9f38

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Injector.pcqn.f5b0d6a651d38a8b279c4897675d9f38

.exe 10KB

jaffacakes118_Trojan-Dropper.Win32.Injector.pcqn.f5b0d6a651d38a8b279c4897675d9f38

IMPHASH 6c0ad8c12fcf6322a69554705d4d3168
SHA256 cff377faee4e3f73ba3ff30f496d4aac83530b6485dd909a34d1034b4f4148b8
MD5 f5b0d6a651d38a8b279c4897675d9f38
SHA1 36c6ac142293691b80aa2aa4abd0cee3241ebca0
SHA512 f883220cbf02d8e0742349102df75c2d0f662fe8952af7c1d726f85063339b6edecee669e225c6022c2784337c069cd7a0b91258b65e2df98c0051c414d2c4ff
SSDEEP 192:W5l3XeWSw1xObqns04jgWFc4yR3Zk5vk04zw4cHGTp61oyMl:yZXeW5O2T4j8XRGdk04zLcA61y
TLSH
T12022D62FDE38D8A3C58440F007AFAB3EDE7799164238A7BB570CC9490AD4647D96618B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8166

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoA Sleep GetCommandLineA CreateMutexA ReleaseMutex SetUnhandledExceptionFilter CreateDirectoryA ReadFile GetLastError lstrcatA DeleteFileA SetLastError lstrcpyA FreeLibrary GetWindowsDirectoryA LoadLibraryA GetProcAddress FindResourceA CreateFileA SetFileTime SizeofResource lstrlenA GetCurrentProcess Process32First Process32Next lstrcmpiA ExitProcess GetCurrentThreadId GetModuleHandleA

user32

GetInputState wsprintfA ShowWindow

advapi32

RegCloseKey OpenSCManagerA OpenServiceA StartServiceA CreateServiceA CloseServiceHandle RegOpenKeyExA RegSaveKeyA RegCreateKeyExA RegRestoreKeyA RegSetValueExA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegDeleteKeyA RegDeleteValueA

msvcrt

_exit _strnset _strcmpi strtok ??2@YAPAXI@Z memset memcpy strchr _except_handler3 __CxxFrameHandler realloc malloc strlen ??3@YAXPAX@Z strstr ??1type_info@@UAE@XZ _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp

Sharing