jaffacakes118_Trojan-Dropper[.]Win32[.]Scrop[.]vwz[.]d7b6707c86937403ce42a72b79f3be7b

General

Target
jaffacakes118_Trojan-Dropper.Win32.Scrop.vwz.d7b6707c86937403ce42a72b79f3be7b
Size 256KB
Sample261009-yevnsat19n
SHA256 b259c0279986d556046a743df234db0607a052c8836ab799d56a6e80b9b7eaba
MD5 d7b6707c86937403ce42a72b79f3be7b
SHA1 fa2fde0307bb8a12639320d35f159f2e4f236d18
SHA512 7b49240fd07e99dadccd3620d8a8060b79961fb7241af804b2b65f406ddda86ab9fe2f63e93dfd5b09c2d7b9f858aaec9d0279d9e7b750a317f1e689b6475eda
SSDEEP 3072:GGor0tW2Ui22jhBWQfcqJJ0dEkHTpbSnkaaXvKGrSDrlwRTp49zikcjPWug9BNxE:Rw2/22jvWQ37WNba0ApwMOiD
TLSH
T1CC44D01073E48871E2931A368563E7690E7B7C621E22A98F0FFA15BD5F296D1C72530F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Scrop.vwz.d7b6707c86937403ce42a72b79f3be7b

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Scrop.vwz.d7b6707c86937403ce42a72b79f3be7b

.exe 256KB

jaffacakes118_Trojan-Dropper.Win32.Scrop.vwz.d7b6707c86937403ce42a72b79f3be7b

IMPHASH c32287106fb0e5db78ef0fe1e43a919f
SHA256 b259c0279986d556046a743df234db0607a052c8836ab799d56a6e80b9b7eaba
MD5 d7b6707c86937403ce42a72b79f3be7b
SHA1 fa2fde0307bb8a12639320d35f159f2e4f236d18
SHA512 7b49240fd07e99dadccd3620d8a8060b79961fb7241af804b2b65f406ddda86ab9fe2f63e93dfd5b09c2d7b9f858aaec9d0279d9e7b750a317f1e689b6475eda
SSDEEP 3072:GGor0tW2Ui22jhBWQfcqJJ0dEkHTpbSnkaaXvKGrSDrlwRTp49zikcjPWug9BNxE:Rw2/22jvWQ37WNba0ApwMOiD
TLSH
T1CC44D01073E48871E2931A368563E7690E7B7C621E22A98F0FFA15BD5F296D1C72530F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15907

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fice69_zeduyoyeveta92_lijuxomejocox13_zipazox-vedak.pdb

kernel32

DebugActiveProcess GetDriveTypeW WaitNamedPipeA SetEnvironmentVariableW WaitForSingleObject GetModuleHandleW ExpandEnvironmentStringsA EnumTimeFormatsA EnumTimeFormatsW GetCommandLineA GlobalAlloc Sleep FormatMessageW SetConsoleCP IsProcessorFeaturePresent ReplaceFileW GetSystemDirectoryA GetStringTypeExA GetLastError DefineDosDeviceW HeapUnlock GetFirmwareEnvironmentVariableW LoadLibraryA GetDiskFreeSpaceA GetVolumePathNamesForVolumeNameA GetDefaultCommConfigA FindFirstVolumeMountPointA VirtualProtect DeleteCriticalSection FindAtomW MoveFileWithProgressW EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetStringTypeW MultiByteToWideChar LCMapStringW HeapReAlloc RaiseException RtlUnwind HeapSize HeapAlloc GetProcAddress ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy EncodePointer InitializeCriticalSectionAndSpinCount LeaveCriticalSection FatalAppExitA EnterCriticalSection SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryW GetLocaleInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapFree WideCharToMultiByte GetCPInfo GetACP GetOEMCP IsValidCodePage IsValidLocale

user32

GetMenuBarInfo GetScrollInfo EmptyClipboard SystemParametersInfoA GetMessageTime ChildWindowFromPoint EnumPropsW

msimg32

AlphaBlend

Sharing