jaffacakes118_Backdoor[.]Win32[.]Androm[.]nipz[.]16fad7355647c8e3b9f090452bfe1efc

General

Target
jaffacakes118_Backdoor.Win32.Androm.nipz.16fad7355647c8e3b9f090452bfe1efc
Size 164KB
Sample261012-3vkwqsfe79
SHA256 04a6d15df5361743a44d5dc9ef6d0aea7a5ac91c70b4c68b6c258275ede50af8
MD5 16fad7355647c8e3b9f090452bfe1efc
SHA1 0c76d9b70b9e48ba4756104067334ca6186b7229
SHA512 aafa18bd84cd87da07e019a8f90949c187aaf74908fa9ed850205a6fdfc949a7100dab9fdba99956c5fd49ae9cf91c199b300c513bbe631cfaff027670b91a75
SSDEEP 3072:McrVZtajRGe/B0Ii8ZwO/aWSFSFOMZGquvZPXnefPTnVB6Ue:TtajX5jZwO/aWZOMZGThSP3
TLSH
T111F3CE2232D0D072E45B0A304574C7F24ABEB9314761819BBBA42F6E5F707E0977A7A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Backdoor.Win32.Androm.nipz.16fad7355647c8e3b9f090452bfe1efc

File Explorer

jaffacakes118_Backdoor.Win32.Androm.nipz.16fad7355647c8e3b9f090452bfe1efc

.exe 164KB

jaffacakes118_Backdoor.Win32.Androm.nipz.16fad7355647c8e3b9f090452bfe1efc

IMPHASH dd59582cd00701fc028526fba6cc4d4f
SHA256 04a6d15df5361743a44d5dc9ef6d0aea7a5ac91c70b4c68b6c258275ede50af8
MD5 16fad7355647c8e3b9f090452bfe1efc
SHA1 0c76d9b70b9e48ba4756104067334ca6186b7229
SHA512 aafa18bd84cd87da07e019a8f90949c187aaf74908fa9ed850205a6fdfc949a7100dab9fdba99956c5fd49ae9cf91c199b300c513bbe631cfaff027670b91a75
SSDEEP 3072:McrVZtajRGe/B0Ii8ZwO/aWSFSFOMZGquvZPXnefPTnVB6Ue:TtajX5jZwO/aWZOMZGThSP3
TLSH
T111F3CE2232D0D072E45B0A304574C7F24ABEB9314761819BBBA42F6E5F707E0977A7A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

21190

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapAlloc GetProcessHeap GetProcAddress IsDebuggerPresent CreateFileA VirtualAlloc CloseHandle CreateDirectoryA CreateProcessA DeleteFileA FindResourceA FormatMessageA GetACP GetCommandLineA GetCurrentProcess GetEnvironmentVariableA GetExitCodeProcess GetFileAttributesA GetFileSize GetFullPathNameA GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetSystemDefaultLCID GetSystemInfo GetUserDefaultLangID GetVersionExA GetWindowsDirectoryA IsDBCSLeadByte LoadLibraryA LoadResource LockResource ReadFile RemoveDirectoryA SetEndOfFile SetErrorMode SetFilePointer SetLastError SizeofResource Sleep VirtualFree VirtualProtect VirtualQuery WriteFile GetSystemTimeAsFileTime HeapSetInformation GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter EncodePointer DecodePointer WideCharToMultiByte GetTimeZoneInformation EnterCriticalSection LeaveCriticalSection GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo GetOEMCP IsValidCodePage HeapFree IsProcessorFeaturePresent RtlUnwind LoadLibraryW LCMapStringW MultiByteToWideChar GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize CompareStringW SetEnvironmentVariableA WriteConsoleW SetStdHandle CreateFileW

Sharing