jaffacakes118_Trojan-PSW[.]Win32[.]Fareit[.]eqxn[.]da0df74f1fd82388c6d0a25d48e3ca0a

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-PSW.Win32.Fareit.eqxn.da0df74f1fd82388c6d0a25d48e3ca0a
Size 299KB
Sample261010-pyachsc17l
SHA256 f8f4cff69389424e27a2e5ac770a076d8183228e19e617767ddff3d016e36454
MD5 da0df74f1fd82388c6d0a25d48e3ca0a
SHA1 710a7ba3bb8f81f57aa4bdd156e8715687ec58ef
SHA512 3c97f289ec7bf1af02c3be7ded22f4380fa837283747cc98d2c06fa463a9976a27576fffb43477c23bcd39263805ad60b9cf141e71b872f8b03edf4c3ea81a64
SSDEEP 3072:Lgn/416KhD24E5NuAtQ7eifCGAs5Rh+NRVfXcnxlTVYW68/9ORrikO/2xhiQekJ6:6/4PJsNtQKiIEQ0xliY/kRwOxUQe+C
TLSH
T15B64CF12B7C0C5B2D56B06304875ABB11B7AFC311B21C6CBB7A47B2E4E707D19A36356
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-PSW.Win32.Fareit.eqxn.da0df74f1fd82388c6d0a25d48e3ca0a

File Explorer

jaffacakes118_Trojan-PSW.Win32.Fareit.eqxn.da0df74f1fd82388c6d0a25d48e3ca0a

.exe 299KB

jaffacakes118_Trojan-PSW.Win32.Fareit.eqxn.da0df74f1fd82388c6d0a25d48e3ca0a

IMPHASH ac0abd00a267f395eceee15ff503f436
SHA256 f8f4cff69389424e27a2e5ac770a076d8183228e19e617767ddff3d016e36454
MD5 da0df74f1fd82388c6d0a25d48e3ca0a
SHA1 710a7ba3bb8f81f57aa4bdd156e8715687ec58ef
SHA512 3c97f289ec7bf1af02c3be7ded22f4380fa837283747cc98d2c06fa463a9976a27576fffb43477c23bcd39263805ad60b9cf141e71b872f8b03edf4c3ea81a64
SSDEEP 3072:Lgn/416KhD24E5NuAtQ7eifCGAs5Rh+NRVfXcnxlTVYW68/9ORrikO/2xhiQekJ6:6/4PJsNtQKiIEQ0xliY/kRwOxUQe+C
TLSH
T15B64CF12B7C0C5B2D56B06304875ABB11B7AFC311B21C6CBB7A47B2E4E707D19A36356
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

35842

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA InitializeCriticalSectionAndSpinCount MultiByteToWideChar WriteConsoleW GetConsoleOutputCP WriteConsoleA HeapSize GetConsoleCP SetFilePointer GetSystemTimeAsFileTime GetCurrentProcessId WaitForSingleObject QueryPerformanceCounter SetHandleCount GetEnvironmentStringsW GetLocaleInfoA CreateProcessA SetStdHandle FlushFileBuffers LoadLibraryA GetFullPathNameW GetLastError FormatMessageW LocalFree CreateThread GetConsoleWindow VirtualAlloc FindResourceExA OpenEventA MulDiv DeleteFileA GetTempPathA GetCurrentDirectoryA GetCPInfo WideCharToMultiByte GetStdHandle SetConsoleWindowInfo SetConsoleScreenBufferSize CreateEventA GetCurrentProcess GetThreadId GetCurrentThreadId SetEvent FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA IsValidCodePage GetOEMCP CreateFileMappingA MapViewOfFile CloseHandle CreateFileA GetStartupInfoA SetLastError GetFileType GetACP GetModuleFileNameA WriteFile HeapCreate HeapReAlloc VirtualFree GetModuleHandleA ExitProcess ExitThread GetTickCount lstrlenA Sleep EnterCriticalSection RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException ReadConsoleInputA SetConsoleMode GetConsoleMode ResumeThread HeapAlloc GetCommandLineA HeapFree GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement DeleteCriticalSection LeaveCriticalSection

user32

CreateWindowExA DispatchMessageA TranslateMessage GetMessageA SendMessageA CopyImage MessageBoxA DrawTextA EndDeferWindowPos GetCursorPos TrackPopupMenu GetSysColor GetDC BeginPaint GetParent GetMenuState GetWindowThreadProcessId SetRect FillRect ReleaseDC CheckMenuItem GetWindowTextA PostQuitMessage DefWindowProcA GetDlgItem LoadIconA DestroyIcon SetWindowTextA GetDlgItemTextA GetWindowTextLengthA DestroyWindow OffsetRect FindWindowA

gdi32

Escape SetTextColor CreateFontIndirectA SelectObject TextOutA DeleteObject GetDeviceCaps GetObjectA SetViewportOrgEx SelectClipRgn GetStockObject CreateDIBSection CreateCompatibleDC SetMapMode SetWindowExtEx CreateMetaFileA SetBkColor CreateFontA GetTextExtentPoint32A DeleteDC GetTextCharsetInfo

advapi32

CryptDestroyKey RegOpenKeyExA CryptAcquireContextA CryptImportKey CryptSetKeyParam CryptReleaseContext RegCloseKey CryptEncrypt CryptGenKey RegQueryInfoKeyA RegEnumKeyExA RegEnumValueA

shell32

ExtractIconExA DragQueryFileA SHGetFolderPathA

ole32

CreateClassMoniker

comctl32

ImageList_GetIconSize CreateToolbarEx InitCommonControlsEx ord17 ImageList_Create ImageList_ReplaceIcon

fwpuclnt

FwpmFilterAdd0 FwpmFilterDeleteById0 FwpmSubLayerAdd0 FwpmSubLayerDeleteByKey0 FwpmEngineOpen0 FwpmEngineClose0

rpcrt4

UuidCreate

avifil32

AVIMakeCompressedStream AVIStreamStart

shlwapi

ColorRGBToHLS PathFileExistsA