jaffacakes118_Trojan-Dropper[.]Win32[.]Killav[.]geq[.]4963feddffa33935df4ac2b11f94a08c

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Dropper.Win32.Killav.geq.4963feddffa33935df4ac2b11f94a08c
Size 42KB
Sample261009-xzrl7adv21
SHA256 10e7e1eda0f344a319fb72fd49e77a51d36ee416bb8d5e685f48b1d2ce9accbf
MD5 4963feddffa33935df4ac2b11f94a08c
SHA1 8f42ff63522c27ed6312ddd921ca4c27d07523d4
SHA512 34d0b2d38141e551efd4285b9d0ab7dc7b07b43f7b44f16184b7b4c6424537b423a770bbb8665eea97583826b86d364e8f021bdab8f7af7d0d7df64c485a228d
SSDEEP 768:1WFQx1mTijkWtLA5xN7YVdNVB1ZHmHGLYihWmPMvhsoXEqiEtxlha5hscci:K+jkW8xN0FVB1tmHGdhWsoHiE0s
TLSH
T1EB13C0D76D08D87BC38C55B345FB887EFBA815154277D2D282F2CCD819A0638EC79A85
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Killav.geq.4963feddffa33935df4ac2b11f94a08c

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Killav.geq.4963feddffa33935df4ac2b11f94a08c

.exe 42KB

jaffacakes118_Trojan-Dropper.Win32.Killav.geq.4963feddffa33935df4ac2b11f94a08c

IMPHASH 6e12742aa754448f3bfd88a8f5fa6427
SHA256 10e7e1eda0f344a319fb72fd49e77a51d36ee416bb8d5e685f48b1d2ce9accbf
MD5 4963feddffa33935df4ac2b11f94a08c
SHA1 8f42ff63522c27ed6312ddd921ca4c27d07523d4
SHA512 34d0b2d38141e551efd4285b9d0ab7dc7b07b43f7b44f16184b7b4c6424537b423a770bbb8665eea97583826b86d364e8f021bdab8f7af7d0d7df64c485a228d
SSDEEP 768:1WFQx1mTijkWtLA5xN7YVdNVB1ZHmHGLYihWmPMvhsoXEqiEtxlha5hscci:K+jkW8xN0FVB1tmHGdhWsoHiE0s
TLSH
T1EB13C0D76D08D87BC38C55B345FB887EFBA815154277D2D282F2CCD819A0638EC79A85
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

512B

Virtual Size

66B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.360

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1024B

Virtual Size

916B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

776B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

36KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

424B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jaffacakes118_Trojan-Dropper.Win32.Killav.geq.4963feddffa33935df4ac2b11f94a08c

kernel32

user32

generic