jaffacakes118_Trojan-Dropper[.]Win32[.]Small[.]yc[.]932f4147f66c4ab6f40795bd5a91f357

General

Target
jaffacakes118_Trojan-Dropper.Win32.Small.yc.932f4147f66c4ab6f40795bd5a91f357
Size 132KB
Sample261009-yzn2qstset
SHA256 9922ef9e4d81495f5fe84b8413e7dc059db8b2ce0825a1ce80ecd97e813070eb
MD5 932f4147f66c4ab6f40795bd5a91f357
SHA1 c5787a43bd0d4499886db6d66fd9be53c78ab7d8
SHA512 aa763fe00c576eb9fa8fe822b9f4b929e2afcd29595a2d45e4cf8da4de70cfe37ee43f10568a1c0fadf36401105a83ea44fcd43c84fd00de5ad220945c9e4c6b
SSDEEP 1536:qoBlsTU7Ii8xpz6+yNouObuYy1IqTRswtZBFO5qXoRGlDn:LDixpjyNoxLymaH/O5qXoRGlr
TLSH
T1D6D38E167AE2C5F3C589027024E24F3E6F7F75200BE25983AF585A592D319E1E53B347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Small.yc.932f4147f66c4ab6f40795bd5a91f357

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Small.yc.932f4147f66c4ab6f40795bd5a91f357

.exe 132KB

jaffacakes118_Trojan-Dropper.Win32.Small.yc.932f4147f66c4ab6f40795bd5a91f357

IMPHASH 8b92337b861efe2ac0446ec04088ca2e
SHA256 9922ef9e4d81495f5fe84b8413e7dc059db8b2ce0825a1ce80ecd97e813070eb
MD5 932f4147f66c4ab6f40795bd5a91f357
SHA1 c5787a43bd0d4499886db6d66fd9be53c78ab7d8
SHA512 aa763fe00c576eb9fa8fe822b9f4b929e2afcd29595a2d45e4cf8da4de70cfe37ee43f10568a1c0fadf36401105a83ea44fcd43c84fd00de5ad220945c9e4c6b
SSDEEP 1536:qoBlsTU7Ii8xpz6+yNouObuYy1IqTRswtZBFO5qXoRGlDn:LDixpjyNoxLymaH/O5qXoRGlr
TLSH
T1D6D38E167AE2C5F3C589027024E24F3E6F7F75200BE25983AF585A592D319E1E53B347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8070

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteFile CreateFileA SizeofResource LockResource LoadResource CloseHandle GetLastError FreeLibrary GetCurrentProcessId WaitForSingleObject CreateThread Sleep OpenProcess MultiByteToWideChar VirtualAllocEx WriteProcessMemory GetModuleHandleA GetProcAddress CreateRemoteThread GetVersionExA GetModuleFileNameA CopyFileA lstrlenA LoadLibraryA FindResourceA GetSystemDirectoryA RtlUnwind GetStartupInfoA GetCommandLineA GetVersion ExitProcess GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue TerminateProcess GetCurrentProcess UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType DeleteCriticalSection GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree HeapFree SetFilePointer EnterCriticalSection LeaveCriticalSection HeapAlloc InterlockedDecrement InterlockedIncrement SetUnhandledExceptionFilter IsBadReadPtr IsBadWritePtr IsBadCodePtr InitializeCriticalSection GetCPInfo GetACP GetOEMCP VirtualAlloc HeapReAlloc SetStdHandle LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers

advapi32

RegisterServiceCtrlHandlerA SetServiceStatus OpenServiceA QueryServiceStatus DeleteService ControlService OpenSCManagerA CreateServiceA CloseServiceHandle RegOpenKeyA RegSetValueExA RegCloseKey StartServiceCtrlDispatcherA StartServiceA

psapi

EnumProcessModules GetModuleFileNameExA EnumProcesses

Sharing