jaffacakes118_Trojan[.]Win32[.]Yakes[.]wfby[.]b3c2d91ff1e1e4dc5f23c017d09ec5dc

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Yakes.wfby.b3c2d91ff1e1e4dc5f23c017d09ec5dc
Size 928KB
Sample261012-m6abdacc66
SHA256 098dedd2bc438068491a8a47a6fc2c786bd77ed4acafcbc7dca57b5c246430dc
MD5 b3c2d91ff1e1e4dc5f23c017d09ec5dc
SHA1 ee2e5a4053a8adac4dd746983ae5341e17e87612
SHA512 47b1315e35d749944d1a58f4ba7a7e4970f8fecbbfcb667c1b169941bbb2926ad62096cef0b6bd9417bbd96be207c685e31602864a352425fa81235857f95336
SSDEEP 12288:bzWrrfB3uyk7idNv22YQ6dGOpb3HwaJ9e/jAw2:HW3fRuyk7wvlOQIb3HwaJ9erAw2
TLSH
T13715E0A97654D437E250067AC682F338A634BD512F26C50373F57FAB7E39387AD24282
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Yakes.wfby.b3c2d91ff1e1e4dc5f23c017d09ec5dc

File Explorer

jaffacakes118_Trojan.Win32.Yakes.wfby.b3c2d91ff1e1e4dc5f23c017d09ec5dc

.exe 928KB

jaffacakes118_Trojan.Win32.Yakes.wfby.b3c2d91ff1e1e4dc5f23c017d09ec5dc

IMPHASH 67dd69dc7ec34b4340ffd8b1e3301352
SHA256 098dedd2bc438068491a8a47a6fc2c786bd77ed4acafcbc7dca57b5c246430dc
MD5 b3c2d91ff1e1e4dc5f23c017d09ec5dc
SHA1 ee2e5a4053a8adac4dd746983ae5341e17e87612
SHA512 47b1315e35d749944d1a58f4ba7a7e4970f8fecbbfcb667c1b169941bbb2926ad62096cef0b6bd9417bbd96be207c685e31602864a352425fa81235857f95336
SSDEEP 12288:bzWrrfB3uyk7idNv22YQ6dGOpb3HwaJ9e/jAw2:HW3fRuyk7wvlOQIb3HwaJ9erAw2
TLSH
T13715E0A97654D437E250067AC682F338A634BD512F26C50373F57FAB7E39387AD24282
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

144610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\view\Many\rich\Paint\fat\short\Pound\Hairfight.pdb

kernel32

HeapFree LoadLibraryW Sleep CopyFileW GetFileAttributesW CreateFileW GetTempPathW GetCurrentDirectoryW GetProcAddress GetLocalTime CreateSemaphoreW CreateEventW HeapWalk WaitForMultipleObjects GetShortPathNameW FileTimeToLocalFileTime HeapAlloc GetVolumeInformationW CreateFileA SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA ReadFile GetLocaleInfoW LoadLibraryA IsValidCodePage IsValidLocale EnumSystemLocalesA CreateProcessW HeapReAlloc GetVersion GetEnvironmentVariableW GetLocaleInfoA GetUserDefaultLCID HeapSize CloseHandle SetFilePointer FlushFileBuffers GetConsoleMode GetConsoleCP VirtualAlloc GetStringTypeW GetStringTypeA GetSystemTimeAsFileTime WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedExchange MultiByteToWideChar InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetVersionExA GetProcessHeap GetStartupInfoW GetCPInfo GetLastError RaiseException RtlUnwind LCMapStringA LCMapStringW GetACP GetOEMCP GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId CompareStringA CompareStringW ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId

user32

GetClientRect DispatchMessageW RegisterHotKey CreatePopupMenu GetDesktopWindow GetClassNameW GetWindowRect LoadImageW DialogBoxIndirectParamW IsWindowEnabled GetForegroundWindow CreateDialogIndirectParamW CheckMenuRadioItem

gdi32

ScaleViewportExtEx OffsetViewportOrgEx SetWindowExtEx

ole32

CoCreateInstance CoUninitialize CoInitialize CoTaskMemFree CoTaskMemAlloc

shlwapi

StrToIntW PathQuoteSpacesW SHRegCreateUSKeyW StrCmpW SHRegWriteUSValueW StrCmpIW SHRegCloseUSKey PathFindFileNameW