jaffacakes118_Trojan-Dropper[.]Win32[.]TDSS[.]amjs[.]ed7bdb7d43acef507bc61dfd03445d8a

General

Target
jaffacakes118_Trojan-Dropper.Win32.TDSS.amjs.ed7bdb7d43acef507bc61dfd03445d8a
Size 140KB
Sample261009-za2f7stvay
SHA256 299a639493c7a438bdf9511221308c35b6970b34a8cd6ee9832b042490b46697
MD5 ed7bdb7d43acef507bc61dfd03445d8a
SHA1 72cec5ea4d9f781c8902151b6cb24559d8900c5e
SHA512 13eb834ee0054d939c08edbaf4e8ab11a5fcb8fcfefc4a3a26d6145b3cc666c24a42d3cc80935bc73ce22268f658431bd7daba1147a2aaaea91dcccca17deedc
SSDEEP 3072:S8qRJIiM1pmDt8v3H7oMd9i6VTFf3uNS71/YmOn1tO:9qH5DuX739XhFf3uNS71QmOn1
TLSH
T1EDE30120B7DA8248E8B09BB0A4B75751433AFE70BD78EF481155B91D69BA4C1DDA0F33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.TDSS.amjs.ed7bdb7d43acef507bc61dfd03445d8a

File Explorer

jaffacakes118_Trojan-Dropper.Win32.TDSS.amjs.ed7bdb7d43acef507bc61dfd03445d8a

.exe 140KB

jaffacakes118_Trojan-Dropper.Win32.TDSS.amjs.ed7bdb7d43acef507bc61dfd03445d8a

IMPHASH 86f7069c094d03c5d7187be2f5f2a54b
SHA256 299a639493c7a438bdf9511221308c35b6970b34a8cd6ee9832b042490b46697
MD5 ed7bdb7d43acef507bc61dfd03445d8a
SHA1 72cec5ea4d9f781c8902151b6cb24559d8900c5e
SHA512 13eb834ee0054d939c08edbaf4e8ab11a5fcb8fcfefc4a3a26d6145b3cc666c24a42d3cc80935bc73ce22268f658431bd7daba1147a2aaaea91dcccca17deedc
SSDEEP 3072:S8qRJIiM1pmDt8v3H7oMd9i6VTFf3uNS71/YmOn1tO:9qH5DuX739XhFf3uNS71QmOn1
TLSH
T1EDE30120B7DA8248E8B09BB0A4B75751433AFE70BD78EF481155B91D69BA4C1DDA0F33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5468

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualFree GetACP GetModuleHandleA HeapFree CreateDirectoryExA GetNumberFormatW GetProcAddress SetErrorMode ExitThread GetLastError lstrcmpW GlobalFree CreateDirectoryA GetTimeFormatW GetCurrentDirectoryA VirtualProtect DeleteFileA FindNextFileW VirtualAlloc RtlUnwind CreateProcessA DosDateTimeToFileTime LoadLibraryW OutputDebugStringA TlsGetValue

msvcrt

toupper _wcsicmp __setusermatherr strncpy printf _wcsnicmp wcsncpy wcstol iswlower memcpy towupper __CxxFrameHandler _wcmdln wcscmp _wtoi wcstok atoi _XcptFilter wcsrchr swscanf

user32

LoadCursorW SendMessageW DialogBoxParamA GetProcessWindowStation UnregisterClassW ReleaseDC SetCapture LoadCursorA SendMessageA ClientToScreen wsprintfW GetMenuItemCount MapWindowPoints CopyRect SetScrollPos DispatchMessageW DestroyWindow GetParent IsWindow LoadImageW LoadMenuW BeginPaint GetCursorPos ScreenToClient CheckDlgButton RegisterClassA ReleaseCapture

gdi32

TranslateCharsetInfo Rectangle CreateFontIndirectW CreateBitmap SetTextColor RestoreDC StretchBlt SetBkMode CreateCompatibleDC PatBlt

opengl32

glColor4i glTexCoord2dv glFogfv glColor4f wglShareLists glColor3ui glColor4d glTexCoord2d glStencilMask GlmfBeginGlsBlock

Name

.text

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.crt

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

115B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

64KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_Trojan-Dropper.Win32.TDSS.amjs.ed7bdb7d43acef507bc61dfd03445d8a

kernel32

msvcrt

user32

gdi32

opengl32

generic