jaffacakes118_Backdoor[.]Win32[.]Bifrose[.]bgn[.]8708170f166417003cbdc4709f924e8b

General

Target
jaffacakes118_Backdoor.Win32.Bifrose.bgn.8708170f166417003cbdc4709f924e8b
Size 176KB
Sample261012-3v8b2atsev
SHA256 52cc81731e98a6d8b0811bc973e2031bb73f352d1063cc86db64208c8b52853d
MD5 8708170f166417003cbdc4709f924e8b
SHA1 e64127359792d80d70bd37e66e2873ef48e63fd3
SHA512 80ce9f8f2351bb82148f54cc89b30ca0f174c7592965f6cbf0b99c61c32554d8ed7d5ebeb76bbf3b3720c624030d0f90874d73c269cd36afbf5bffebe0d8521a
SSDEEP 3072:r1dlKwgj23+Oz05YoNozGrvGAqRgYxgg9ZUACKSeN+17kd8:r1dlZro5yMlkxgg9ZFSq+175
TLSH
T14204D086B9C2817EC4B0053254B18FB94F3EBDF0162A4D83BF19FD1B2DB1594AB06B49
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Backdoor.Win32.Bifrose.bgn.8708170f166417003cbdc4709f924e8b

File Explorer

jaffacakes118_Backdoor.Win32.Bifrose.bgn.8708170f166417003cbdc4709f924e8b

.exe 176KB

jaffacakes118_Backdoor.Win32.Bifrose.bgn.8708170f166417003cbdc4709f924e8b

IMPHASH 18a8f1cc88bfbadd72d06bfd1a86f94c
SHA256 52cc81731e98a6d8b0811bc973e2031bb73f352d1063cc86db64208c8b52853d
MD5 8708170f166417003cbdc4709f924e8b
SHA1 e64127359792d80d70bd37e66e2873ef48e63fd3
SHA512 80ce9f8f2351bb82148f54cc89b30ca0f174c7592965f6cbf0b99c61c32554d8ed7d5ebeb76bbf3b3720c624030d0f90874d73c269cd36afbf5bffebe0d8521a
SSDEEP 3072:r1dlKwgj23+Oz05YoNozGrvGAqRgYxgg9ZUACKSeN+17kd8:r1dlZro5yMlkxgg9ZFSq+175
TLSH
T14204D086B9C2817EC4B0053254B18FB94F3EBDF0162A4D83BF19FD1B2DB1594AB06B49
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

29825

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MultiByteToWideChar GetFileAttributesA WaitForSingleObject GetCurrentDirectoryA GetPrivateProfileStringA GetTempPathA GetModuleFileNameA SetCurrentDirectoryA SetFileAttributesA CloseHandle GetLastError SetFileTime LocalFileTimeToFileTime SystemTimeToFileTime WriteFile CreateFileA LeaveCriticalSection EnterCriticalSection InitializeCriticalSection DeleteFileA GetStringTypeW GetFullPathNameA GetDriveTypeA RtlUnwind CreateDirectoryA ExitProcess TerminateProcess GetCurrentProcess HeapAlloc HeapFree GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion SetFilePointer SetHandleCount GetStdHandle GetFileType ReadFile GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc IsBadWritePtr UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW SetStdHandle FlushFileBuffers SetUnhandledExceptionFilter IsBadReadPtr IsBadCodePtr GetCPInfo GetACP GetOEMCP GetProcAddress LoadLibraryA SetEndOfFile LCMapStringA LCMapStringW GetStringTypeA

user32

GetDlgItem SetWindowTextA EndDialog LoadIconA UpdateWindow LoadImageA DialogBoxParamA MessageBoxA SendMessageA GetWindowTextA

shell32

ShellExecuteExA ShellExecuteA SHGetDesktopFolder SHGetMalloc SHBrowseForFolderA SHGetPathFromIDListA

Sharing