jaffacakes118_Trojan[.]Win32[.]Trickster[.]axn[.]95549a42ed7722870f7d603a8183be82

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Trickster.axn.95549a42ed7722870f7d603a8183be82
Size 444KB
Sample261012-mxtnnazv3j
SHA256 39c5322b5914fcc360745fd12bbfcab61e5659490d1f0c3e2162c9a24194ccfb
MD5 95549a42ed7722870f7d603a8183be82
SHA1 3b799fea050df9dfb348288f45053be782e95507
SHA512 70ef87fb296b2f9d41ba2559b0ac512eb3e113051ed36f867b7fc4ad3fdd30c755f5d63b0df5b707a75116796629399df56b8052e3fbfaf621f867011ab2d149
SSDEEP 12288:tZ5tRkzOCj+9IKZM2mOg/SqP0DbCrcE8:JMzgIJftrP0DbCrj8
TLSH
T1C6A47D0CCEAF18B3F5D5C038047BC2E5D9A15CA0B9F5DD54FD507D83E2AA6AC9A36821
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Trickster.axn.95549a42ed7722870f7d603a8183be82

File Explorer

jaffacakes118_Trojan.Win32.Trickster.axn.95549a42ed7722870f7d603a8183be82

.exe 444KB

jaffacakes118_Trojan.Win32.Trickster.axn.95549a42ed7722870f7d603a8183be82

IMPHASH 00615ceb098e91e69cd0987e99e6b017
SHA256 39c5322b5914fcc360745fd12bbfcab61e5659490d1f0c3e2162c9a24194ccfb
MD5 95549a42ed7722870f7d603a8183be82
SHA1 3b799fea050df9dfb348288f45053be782e95507
SHA512 70ef87fb296b2f9d41ba2559b0ac512eb3e113051ed36f867b7fc4ad3fdd30c755f5d63b0df5b707a75116796629399df56b8052e3fbfaf621f867011ab2d149
SSDEEP 12288:tZ5tRkzOCj+9IKZM2mOg/SqP0DbCrcE8:JMzgIJftrP0DbCrj8
TLSH
T1C6A47D0CCEAF18B3F5D5C038047BC2E5D9A15CA0B9F5DD54FD507D83E2AA6AC9A36821
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6816

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetMessageA DispatchMessageA TranslateMessage LoadCursorA LoadIconA RegisterClassExA BeginPaint EndPaint PostQuitMessage SetTimer DialogBoxParamA DefWindowProcA DestroyWindow EndDialog wsprintfA CreateWindowExA MoveWindow SendMessageA ReleaseDC GetWindowRect SetWindowPos SetWindowTextA GetScrollPos LockWindowUpdate OpenClipboard GetWindowPlacement MapWindowPoints ModifyMenuW GetCursorPos EndDeferWindowPos EnableMenuItem ShowCaret GetActiveWindow wsprintfW GetScrollRange RegisterClassA SetWindowLongA GetWindowLongA GetClassNameA SetDlgItemTextA

kernel32

InterlockedIncrement InterlockedDecrement GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar LoadLibraryA GetProcAddress HeapReAlloc VirtualAlloc HeapAlloc GetOEMCP GetACP GetCPInfo LeaveCriticalSection EnterCriticalSection InitializeCriticalSection HeapFree VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA TlsGetValue SetLastError GetStartupInfoA WideCharToMultiByte MapViewOfFile lstrlenA DeleteFileA lstrcpyA GetVersion SleepEx GetTempPathA GetLastError lstrcatA CreateFileA GetModuleHandleA GetVersionExA GetCommandLineW WriteFile TlsAlloc RtlUnwind GetCommandLineA ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetCurrentThreadId TlsSetValue

comctl32

InitCommonControlsEx

shell32

CommandLineToArgvW

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyExA