jaffacakes118_Trojan-Downloader[.]Win32[.]Avalod[.]ac[.]546cd9aa633d3bf0eb4217ed22c1a854

General

Target
jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.546cd9aa633d3bf0eb4217ed22c1a854
Size 80KB
Sample261012-x4dacswt9m
SHA256 03b4a355d085d0d654256a30accd892c7145e724eb8c3711c1d6383ac147fa91
MD5 546cd9aa633d3bf0eb4217ed22c1a854
SHA1 be0d137a8b5d1c9fca140505eee1d894941e54ec
SHA512 32c1936d6b6c7286af6b6b026b8bd495d519d56e07b2c44847add1ce9bffe91b4a4142b9605944049b7e0443d5df219519fa4629d94a9676c18b0fb6544776e5
SSDEEP 1536:hO8QAE4M4S/H8MAe/lJtunrISkuR4ejzde0RIa3:QAE4M4S0MAulJtysm4eP1Rj3
TLSH
T1A88338035B158B43D8E500F9F81BAFAA74A839353D009F5F638D1D6FD6361F1A92278A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.546cd9aa633d3bf0eb4217ed22c1a854

File Explorer

jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.546cd9aa633d3bf0eb4217ed22c1a854

.dll 80KB

jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.546cd9aa633d3bf0eb4217ed22c1a854

IMPHASH 22eed252400dfc65301636a6530fa3a6
SHA256 03b4a355d085d0d654256a30accd892c7145e724eb8c3711c1d6383ac147fa91
MD5 546cd9aa633d3bf0eb4217ed22c1a854
SHA1 be0d137a8b5d1c9fca140505eee1d894941e54ec
SHA512 32c1936d6b6c7286af6b6b026b8bd495d519d56e07b2c44847add1ce9bffe91b4a4142b9605944049b7e0443d5df219519fa4629d94a9676c18b0fb6544776e5
SSDEEP 1536:hO8QAE4M4S/H8MAe/lJtunrISkuR4ejzde0RIa3:QAE4M4S0MAulJtysm4eP1Rj3
TLSH
T1A88338035B158B43D8E500F9F81BAFAA74A839353D009F5F638D1D6FD6361F1A92278A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12311

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

ExitProcess Beep QueryPerformanceFrequency HeapFree HeapAlloc GetProcessHeap DeviceIoControl GetCommConfig GlobalAlloc SystemTimeToFileTime GetSystemTime DisableThreadLibraryCalls InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection InterlockedIncrement EnterCriticalSection InterlockedDecrement lstrlenW MultiByteToWideChar lstrlenA GetShortPathNameA WideCharToMultiByte FreeLibrary SizeofResource LoadResource FindResourceA LoadLibraryExA lstrcmpiA GetWindowsDirectoryA CompareFileTime ReadFile FileTimeToSystemTime CreateDirectoryA CopyFileA lstrcpynA IsDBCSLeadByte HeapDestroy InterlockedExchange Sleep InterlockedCompareExchange RtlUnwind SetUnhandledExceptionFilter GetModuleHandleA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetLastError UnmapViewOfFile SetFileTime GetFileSize GetFileTime CloseHandle CreateFileA MapViewOfFile CreateFileMappingA SetEndOfFile SetFilePointer SetErrorMode LoadLibraryA GetModuleFileNameA GetProcAddress DeleteFileA GetLastError ExitThread EnumDateFormatsExA ReadFileEx

Sharing