jaffacakes118_Trojan-Dropper[.]Win32[.]Small[.]akd[.]e56fe50edd5b79c7040814545e9b75ac

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Dropper.Win32.Small.akd.e56fe50edd5b79c7040814545e9b75ac
Size 2.7MB
Sample261009-yjdwtseb28
SHA256 a6ebc589fd4fc6f8f0748b4b9caa386581fbd9ffe758aaad3272d567d48e8870
MD5 e56fe50edd5b79c7040814545e9b75ac
SHA1 53157f1752e80c711a5ca2994d05556c33966350
SHA512 b9b2a99ac675a474b761c8bb7cc0a1d791f63067d1027581764f4feea2fef96f89b9bfcadd1483b03d0cdb499f399e02571a91e3b7097745df673eed2c068230
SSDEEP 49152:T/bHJx/697loxugQ2OzWNrswDNT57iI8wbFw6vGsZVagjzUb2xqSM:LbSowT25jBT8FCW6vGYbqSM
TLSH
T1AFD5C13F9B404BB3C8B108B83AD999697D71D557A3F088F947B7A5B02D1A3B1636C10B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Small.akd.e56fe50edd5b79c7040814545e9b75ac

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Small.akd.e56fe50edd5b79c7040814545e9b75ac

.exe 2.7MB

jaffacakes118_Trojan-Dropper.Win32.Small.akd.e56fe50edd5b79c7040814545e9b75ac

IMPHASH de43819f6987002d63a5772e7e87ff4d
SHA256 a6ebc589fd4fc6f8f0748b4b9caa386581fbd9ffe758aaad3272d567d48e8870
MD5 e56fe50edd5b79c7040814545e9b75ac
SHA1 53157f1752e80c711a5ca2994d05556c33966350
SHA512 b9b2a99ac675a474b761c8bb7cc0a1d791f63067d1027581764f4feea2fef96f89b9bfcadd1483b03d0cdb499f399e02571a91e3b7097745df673eed2c068230
SSDEEP 49152:T/bHJx/697loxugQ2OzWNrswDNT57iI8wbFw6vGsZVagjzUb2xqSM:LbSowT25jBT8FCW6vGYbqSM
TLSH
T1AFD5C13F9B404BB3C8B108B83AD999697D71D557A3F088F947B7A5B02D1A3B1636C10B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

121612

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

shell32

SHBrowseForFolderA SHGetMalloc SHGetPathFromIDListA

comctl32

ord17

kernel32

GetLastError WideCharToMultiByte DeleteFileA lstrlenW InterlockedIncrement InterlockedDecrement QueryPerformanceFrequency CreateEventA Sleep lstrcatA CompareStringA CompareStringW GetVersionExA SetFilePointer SetFileAttributesA SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime FreeLibrary GetProcAddress LoadLibraryA LockResource LoadResource SizeofResource FindResourceA CreateProcessA GetSystemDefaultLCID GlobalHandle VerLanguageNameA SetCurrentDirectoryA WaitForSingleObject GetSystemInfo MulDiv GetModuleFileNameA IsValidCodePage GetVersion FlushFileBuffers SetEndOfFile LocalFree FormatMessageA GetDiskFreeSpaceA GetDriveTypeA CreateDirectoryA RemoveDirectoryA GetExitCodeProcess GetCurrentProcess GetCurrentThread GetLocaleInfoA UnhandledExceptionFilter lstrlenA GetACP GetCPInfo SetUnhandledExceptionFilter IsBadWritePtr VirtualAlloc VirtualFree SetLastError HeapDestroy GetEnvironmentVariableA LCMapStringW LCMapStringA DeleteCriticalSection InitializeCriticalSection TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId HeapSize HeapReAlloc LeaveCriticalSection EnterCriticalSection GetCommandLineA GetStartupInfoA GetModuleHandleA TerminateProcess ExitProcess RaiseException RtlUnwind SystemTimeToFileTime QueryPerformanceCounter ResetEvent SetEvent GetShortPathNameA SearchPathA FindFirstFileA VirtualProtect VirtualQuery FindClose GetStdHandle GetFileType GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle CreateFileA GetFileSize GlobalAlloc CloseHandle GlobalLock ReadFile GlobalUnlock GlobalFree CopyFileA MultiByteToWideChar FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW CreateThread GetExitCodeThread GetTickCount lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GetTempPathA SetErrorMode GetWindowsDirectoryA GetTempFileNameA GetFileAttributesA GetProcessHeap HeapAlloc HeapFree WriteFile lstrcpynA lstrcpyA CreateFileMappingA MapViewOfFile HeapCreate UnmapViewOfFile SetHandleCount GetOEMCP

user32

GetParent GetWindowTextLengthA GetWindowTextA MoveWindow GetWindowPlacement DrawIcon DestroyIcon GetDlgCtrlID SetWindowTextA FillRect GetSysColor GetSysColorBrush IsDialogMessageA SendMessageA EnableWindow GetDlgItemTextA GetWindow SetCursor UpdateWindow GetClassInfoA wvsprintfA LoadStringA GetSystemMetrics SetRect FindWindowA IntersectRect SubtractRect CharPrevA DestroyWindow CreateDialogParamA MessageBoxIndirectA CharNextA MessageBoxA WaitForInputIdle GetWindowLongA BeginPaint EndPaint SetWindowLongA GetClientRect ClientToScreen SetWindowPos GetWindowDC EndDialog GetDlgItem ShowWindow DialogBoxParamA GetDesktopWindow wsprintfA MsgWaitForMultipleObjects PeekMessageA DefWindowProcA PostMessageA KillTimer PostQuitMessage SetTimer LoadIconA LoadCursorA RegisterClassA CreateWindowExA GetMessageA TranslateMessage DispatchMessageA GetDC ReleaseDC ExitWindowsEx SendDlgItemMessageA IsWindow CharLowerBuffA GetWindowRect

gdi32

GetTextExtentPoint32A SetBkMode SetTextColor GetObjectA CreateFontIndirectA CreateSolidBrush CreateCompatibleDC SelectObject CreateFontA DeleteDC DeleteObject GetStockObject GetSystemPaletteEntries CreatePalette GetDeviceCaps SelectPalette RealizePalette CreateDIBitmap BitBlt TranslateCharsetInfo

advapi32

RegQueryValueA RegOpenKeyA RegQueryValueExA RegCloseKey RegDeleteValueA RegSetValueExA RegCreateKeyExA RegEnumValueA RegDeleteKeyA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken FreeSid EqualSid AllocateAndInitializeSid GetTokenInformation OpenThreadToken RegOpenKeyExA

ole32

StringFromCLSID CoTaskMemFree CoCreateGuid CoCreateInstance GetRunningObjectTable StgIsStorageFile StgOpenStorage CoUninitialize CoInitialize CreateItemMoniker

oleaut32

VariantChangeType SysAllocString SysAllocStringLen SysStringLen SysReAllocStringLen SysFreeString VariantClear