jaffacakes118_Trojan[.]Win32[.]Yakes[.]wbuc[.]58d047299ff99fa69bfaa0ab378d35b2

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Yakes.wbuc.58d047299ff99fa69bfaa0ab378d35b2
Size 926KB
Sample261012-m54tlacc59
SHA256 ad68b93c945ece354c432fc60306fb2bce2682953fa12bf7d81fbdbce3485507
MD5 58d047299ff99fa69bfaa0ab378d35b2
SHA1 23b0ae9fd9b34408ba2a893a1018e79ac4b428ca
SHA512 3a1fdb17bc4e5513f921f663b0913edef6dc4fedd0dc2476c41668f282f913ef3cda879b4f3166e7c84dd50ba678827e6a440ebf52b02ddde236d6da66cfc1f4
SSDEEP 24576:z9blPIvdPrRBdA5U8rpIVTlVrNfa7CLf+jEd9VNLz7X:ZbWvdPrrm5U8rpI9rrNfT7+wLbP
TLSH
T17715CF213BE1E036C23235B25E26D7BA66FEBD314A365B4777803F3D2E741828B15619
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Yakes.wbuc.58d047299ff99fa69bfaa0ab378d35b2

File Explorer

jaffacakes118_Trojan.Win32.Yakes.wbuc.58d047299ff99fa69bfaa0ab378d35b2

.exe 926KB

jaffacakes118_Trojan.Win32.Yakes.wbuc.58d047299ff99fa69bfaa0ab378d35b2

IMPHASH f7ede9cc43730ae356f9a64986e62767
SHA256 ad68b93c945ece354c432fc60306fb2bce2682953fa12bf7d81fbdbce3485507
MD5 58d047299ff99fa69bfaa0ab378d35b2
SHA1 23b0ae9fd9b34408ba2a893a1018e79ac4b428ca
SHA512 3a1fdb17bc4e5513f921f663b0913edef6dc4fedd0dc2476c41668f282f913ef3cda879b4f3166e7c84dd50ba678827e6a440ebf52b02ddde236d6da66cfc1f4
SSDEEP 24576:z9blPIvdPrRBdA5U8rpIVTlVrNfa7CLf+jEd9VNLz7X:ZbWvdPrrm5U8rpI9rrNfT7+wLbP
TLSH
T17715CF213BE1E036C23235B25E26D7BA66FEBD314A365B4777803F3D2E741828B15619
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

482938

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsDebuggerPresent RaiseException GetCommandLineA GetStartupInfoA HeapFree HeapReAlloc VirtualAlloc VirtualQuery ExitProcess HeapSize GetACP IsValidCodePage SetHandleCount GetFileType GetTimeZoneInformation FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW VirtualFree SetUnhandledExceptionFilter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA UnhandledExceptionFilter TerminateProcess RtlUnwind GetTickCount WritePrivateProfileStringA GetModuleHandleW SetErrorMode GetFullPathNameA GetVolumeInformationA FindClose DuplicateHandle SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile GetThreadLocale GetOEMCP GetCPInfo InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc FindResourceExA GlobalFlags GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA InterlockedExchange lstrcmpA FormatMessageA LocalFree MulDiv InterlockedDecrement GetFileTime GetFileSizeEx GetFileAttributesA GetFileAttributesExA FileTimeToLocalFileTime FileTimeToSystemTime GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA MultiByteToWideChar FreeLibrary lstrcmpW FreeResource GlobalAlloc GlobalLock GlobalUnlock GlobalFree VirtualProtect LoadResource LockResource SizeofResource FindResourceA SetLastError CreateThread GetCurrentProcessId SetEvent CreateTimerQueueTimer DeleteTimerQueueTimer CreateFileA GetFileSize GetProcessHeap ReadFile WideCharToMultiByte GetModuleHandleA GetLastError lstrcpyA GetProcessWorkingSetSize CreateEventA FindFirstFileA WaitForSingleObject lstrlenA GetLocalTime GetProfileStringA HeapCreate LoadLibraryA GetProcAddress GetPriorityClass HeapAlloc GetCurrentProcess GetModuleFileNameW GetVersionExA CreatePipe CloseHandle CreateIoCompletionPort GetSystemInfo Sleep GetStdHandle QueryPerformanceCounter SetConsoleCursorPosition

user32

UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetMenu SetForegroundWindow IsWindowVisible GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect GetDlgCtrlID DefWindowProcA PtInRect GetMenu IsIconic GetWindowPlacement GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetNextDlgTabItem EndDialog SetPropA GetCapture GetActiveWindow SetWindowPos ShowWindow GetPropA RemovePropA GetAsyncKeyState GetFocus SetFocus PostMessageA IsWindowEnabled GetLastActivePopup IsWindow GetSystemMenu AppendMenuA LoadIconA SetCapture ScreenToClient MessageBeep ReleaseCapture GetParent GetWindow GetDesktopWindow GetTopWindow GetWindowThreadProcessId DefMDIChildProcA SendDlgItemMessageA SetWindowTextA GetDialogBaseUnits SetRectEmpty MapDialogRect LoadAcceleratorsA GetMessageA EndDeferWindowPos MoveWindow LoadBitmapA DialogBoxParamA GetCursorPos SetWindowWord EnableWindow GetForegroundWindow GetWindowTextA GetWindowTextLengthA RegisterClipboardFormatA CallWindowProcA SetActiveWindow LoadImageA DrawFocusRect GetWindowLongA SetDlgItemTextA SystemParametersInfoA FillRect GetSysColorBrush OffsetRect TranslateMessage DispatchMessageA GetDC GetWindowRect BeginPaint GetDlgItem GetClipCursor SetRect ClipCursor MessageBoxA ReleaseDC IntersectRect GetClassNameA GetClassLongA CallNextHookEx SetWindowsHookExA IsChild WinHelpA EnumWindowStationsW InvalidateRect RegisterWindowMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetMenuCheckMarkDimensions PostThreadMessageA GetClientRect SendMessageA CopyRect SetWindowLongA UpdateWindow GetNextDlgGroupItem InvalidateRgn IsRectEmpty CopyAcceleratorTableA CharNextA UnregisterClassA CharUpperA LoadCursorA WindowFromPoint DestroyMenu EndPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetMenuItemBitmaps SetCursor ValidateRect PostQuitMessage IsDialogMessageA SetWindowContextHelpId

gdi32

GetClipBox SetTextColor SetBkColor CreateBitmap RestoreDC GetViewportExtEx GetWindowExtEx PtVisible RectVisible ExtTextOutA Escape SetViewportOrgEx OffsetViewportOrgEx GetTextMetricsA SetWindowExtEx ScaleWindowExtEx CreateRectRgnIndirect GetStockObject GetMapMode EnumFontFamiliesExA GetBkColor GetTextColor GetRgnBox SetViewportExtEx SetTextAlign CreateDCA StartDocA StartPage EndPage EndDoc DeleteDC SwapBuffers GetTextExtentPoint32A ExcludeClipRect SetTextJustification SetBkMode SetAbortProc TextOutA GetObjectA GetDeviceCaps SaveDC SetMapMode CreateCompatibleDC SelectObject StretchBlt CreateRectRgn ExtSelectClipRgn CreateFontA CreateSolidBrush FillRgn ScaleViewportExtEx CreatePen DeleteObject CombineRgn

comdlg32

GetFileTitleA

winspool.drv

ord201 OpenPrinterA ClosePrinter DocumentPropertiesA

advapi32

RegQueryValueExA RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegSetValueExW GetUserNameA CreateWellKnownSid IsTextUnicode OpenProcessToken InitializeSecurityDescriptor SetSecurityDescriptorDacl RegOpenKeyExW RegQueryValueExW RegCloseKey

shell32

DragQueryFileA SHBrowseForFolderA

comctl32

ImageList_Add

shlwapi

StrStrW PathRemoveFileSpecW PathFindExtensionA PathFindFileNameA PathStripToRootA PathIsUNCA

oledlg

ord8

ole32

CoInitializeEx OleInitialize StgOpenStorageOnILockBytes OleIsCurrentClipboard StgCreateDocfileOnILockBytes CoRegisterMessageFilter CoTaskMemAlloc CLSIDFromProgID CLSIDFromString CoFreeUnusedLibraries CoGetClassObject CoUninitialize CoInitialize CoCreateInstance CoTaskMemFree StgOpenStorage OleFlushClipboard CreateILockBytesOnHGlobal CoRevokeClassObject OleUninitialize

oleaut32

VariantTimeToSystemTime SysAllocStringByteLen SysFreeString SysStringLen SysAllocStringLen VariantChangeType VariantClear VariantInit SysAllocString OleTranslateColor SystemTimeToVariantTime SafeArrayDestroy OleCreateFontIndirect VariantCopy

ws2_32

WSAStartup WSAEventSelect

netapi32

NetShareGetInfo

psapi

GetModuleBaseNameW

avicap32

capCreateCaptureWindowA

winscard

SCardEstablishContext

winmm

timeGetDevCaps timeSetEvent timeKillEvent timeEndPeriod waveOutWrite

pdh

PdhGetFormattedCounterValue PdhOpenQueryA PdhMakeCounterPathA

gdiplus

GdipSaveImageToFile GdipDrawEllipseI GdipDrawRectangleI GdipCreateFromHDC2 GdipDisposeImage GdipAlloc GdipFree GdipCloneImage GdipCreateBitmapFromHBITMAP GdipDeletePen GdiplusStartup GdiplusShutdown GdipDeleteGraphics GdipCreatePen1

secur32

SaslInitializeSecurityContextW

opengl32

wglGetCurrentDC

oleacc

CreateStdAccessibleObject LresultFromObject

setupapi

SetupDiGetSelectedDriverA SetupDiGetDriverInfoDetailA

uxtheme

IsThemeDialogTextureEnabled IsThemePartDefined

ntdsapi

DsWriteAccountSpnA