jaffacakes118_Trojan-Spy[.]Win32[.]Panda[.]aof[.]0edc640c21850d4b46d1f0ff9f80970b

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Spy.Win32.Panda.aof.0edc640c21850d4b46d1f0ff9f80970b
Size 348KB
Sample261012-l28spsbe34
SHA256 46e002127e40c0e263b75efe1446d6666f5861c043719768e6d841c8b70482ee
MD5 0edc640c21850d4b46d1f0ff9f80970b
SHA1 c9153d691e9a99b0fb4b1d9a01bc7f23cfdafa5d
SHA512 148be98b31270f3878748e2452a8965c1366c0a2fa44a7f0d5a4659de372ea977b36e6c870d0b121f9d1f4581d1afe03ae8998101b1a814ed0e1862e61fd8968
SSDEEP 3072:Dv8XRUH0zUePsZoBN0XIxVY4t2TcoiAIhDG+g3Mk/XcHxeVpxna8RtKggsNGGGxg:DEWUzxQQTVYHojA1+/NxeVLaMpX
TLSH
T131746B11B611C071F7AA0B308861E9D41AA57C395AB0E56FF6693E7EEB322D3453334E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Spy.Win32.Panda.aof.0edc640c21850d4b46d1f0ff9f80970b

File Explorer

jaffacakes118_Trojan-Spy.Win32.Panda.aof.0edc640c21850d4b46d1f0ff9f80970b

.exe 348KB

jaffacakes118_Trojan-Spy.Win32.Panda.aof.0edc640c21850d4b46d1f0ff9f80970b

IMPHASH 19532c08cdd9c410b8914df0f79f7f03
SHA256 46e002127e40c0e263b75efe1446d6666f5861c043719768e6d841c8b70482ee
MD5 0edc640c21850d4b46d1f0ff9f80970b
SHA1 c9153d691e9a99b0fb4b1d9a01bc7f23cfdafa5d
SHA512 148be98b31270f3878748e2452a8965c1366c0a2fa44a7f0d5a4659de372ea977b36e6c870d0b121f9d1f4581d1afe03ae8998101b1a814ed0e1862e61fd8968
SSDEEP 3072:Dv8XRUH0zUePsZoBN0XIxVY4t2TcoiAIhDG+g3Mk/XcHxeVpxna8RtKggsNGGGxg:DEWUzxQQTVYHojA1+/NxeVLaMpX
TLSH
T131746B11B611C071F7AA0B308861E9D41AA57C395AB0E56FF6693E7EEB322D3453334E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34901

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetOEMCP GetACP GetCPInfo GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStdHandle WriteFile ExitProcess HeapCreate HeapDestroy HeapReAlloc IsValidCodePage Sleep HeapSize InitializeCriticalSection LoadLibraryA MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA GetLastError OutputDebugStringA LoadLibraryW GetProcAddress CreateEventA WaitForSingleObject CreateProcessW CloseHandle HeapAlloc GetConsoleWindow VirtualAlloc VirtualFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InterlockedDecrement GetCurrentThreadId GetModuleFileNameA lstrcpyA lstrcatA FindFirstFileA SetLastError InterlockedIncrement TlsFree TlsSetValue TlsAlloc lstrcmpiA CopyFileA FindNextFileA FindClose TlsGetValue GetStartupInfoA GetProcessHeap GetCommandLineA HeapFree RtlUnwind RaiseException IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetModuleHandleA GetVersionExA GetCurrentProcess TerminateProcess

user32

PtInRect GetClientRect GetScrollInfo LoadBitmapA GetDlgItem UpdateWindow ShowWindow SetWindowTextW CreateDialogParamW DestroyWindow PostQuitMessage DefWindowProcA GetSystemMetrics LoadStringW GetMessageA TranslateMessage DispatchMessageA SetScrollPos GetWindowTextA MoveWindow DialogBoxParamA GetWindowLongA CreateAcceleratorTableA SetCursor AppendMenuA GetDC SetActiveWindow SetCapture SetWindowPos SetForegroundWindow CreatePopupMenu FindWindowA GetCursorPos TrackPopupMenu GetWindowPlacement InvertRect LoadImageA DestroyIcon GetSystemMenu SetMenuItemInfoA DrawMenuBar ReleaseDC GetWindowRect IsWindow GetMenu AdjustWindowRectEx MessageBoxA SendMessageA EnumDisplayMonitors LoadIconA LoadCursorA RegisterClassExW

gdi32

CreateCompatibleDC SelectObject GetStockObject CreatePen CreateSolidBrush Ellipse GetMapMode SetMapMode GetObjectA DPtoLP BitBlt DeleteDC SetPolyFillMode SetBkMode DeleteObject GetOutlineTextMetricsA ExtTextOutW GetTextMetricsA SetGraphicsMode SetStretchBltMode SetBrushOrgEx SetArcDirection SetBkColor SetTextColor SetDCBrushColor SetDCPenColor SetROP2 GetDeviceCaps StretchBlt

advapi32

LookupAccountNameW InitializeSecurityDescriptor RegCloseKey RegSetValueExW RegCreateKeyExW IsValidSecurityDescriptor SetSecurityDescriptorGroup SetSecurityDescriptorOwner AddAccessAllowedAce AddAccessDeniedAce ImpersonateLoggedOnUser SetSecurityDescriptorDacl InitializeAcl

shell32

ShellExecuteA SHBrowseForFolderA

ole32

PropVariantClear

wininet

UnlockUrlCacheEntryStream FtpSetCurrentDirectoryA

ws2_32

WSAEventSelect

avicap32

capCreateCaptureWindowA

cryptui

CryptUIWizFreeDigitalSignContext

shlwapi

PathUnquoteSpacesA StrToIntExA SHStrDupW PathFindFileNameA

comctl32

ImageList_ReplaceIcon ImageList_Create ord17

gdiplus

GdipDisposeImage GdipAlloc GdipCloneImage GdipCreateBitmapFromHBITMAP GdipSaveImageToFile GdipFree

opengl32

glBegin glVertex3f

imm32

ImmGetContext

traffic

TcQueryInterface

tapi32

phoneGetDisplay phoneGetDevCapsW