jaffacakes118_Trojan-Downloader[.]Win32[.]Avalod[.]ac[.]57223d414644768b16717ee88620b82e

General

Target
jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.57223d414644768b16717ee88620b82e
Size 80KB
Sample261012-x4es7aed97
SHA256 28575884038a7b240d65531fb4e218cdcf68b1e14db684a696226caaa5ee92cf
MD5 57223d414644768b16717ee88620b82e
SHA1 28a200ab888e9b1a3bdc8cfdae68d1d7095cbc8c
SHA512 78a39a399a62e0dd54da61a8092f314212182b6d7aca11794f352becd9049f06065d3d018c7e12e4b5ff3dbbf169f8e4a356bffabb3c76aeaddb8d80181301b3
SSDEEP 1536:efUJsThQq5feiMCKlxnkvFFlZxyRDRPpp1bOJZG9+T:eLThQq5FrKlxnyTZodVX1b+U9O
TLSH
T1DB834A0247118B03E8EA04F9F557DFAE796839353D005FAF53CD686EC6261F1AD2278A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.57223d414644768b16717ee88620b82e

File Explorer

jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.57223d414644768b16717ee88620b82e

.dll 80KB

jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.57223d414644768b16717ee88620b82e

IMPHASH 9b592ce9da147ff2a534556dd57e5d9f
SHA256 28575884038a7b240d65531fb4e218cdcf68b1e14db684a696226caaa5ee92cf
MD5 57223d414644768b16717ee88620b82e
SHA1 28a200ab888e9b1a3bdc8cfdae68d1d7095cbc8c
SHA512 78a39a399a62e0dd54da61a8092f314212182b6d7aca11794f352becd9049f06065d3d018c7e12e4b5ff3dbbf169f8e4a356bffabb3c76aeaddb8d80181301b3
SSDEEP 1536:efUJsThQq5feiMCKlxnkvFFlZxyRDRPpp1bOJZG9+T:eLThQq5FrKlxnyTZodVX1b+U9O
TLSH
T1DB834A0247118B03E8EA04F9F557DFAE796839353D005FAF53CD686EC6261F1AD2278A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12422

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

ExitProcess Beep QueryPerformanceFrequency HeapFree HeapAlloc GetProcessHeap DeviceIoControl GetCommConfig GlobalAlloc SystemTimeToFileTime GetSystemTime DisableThreadLibraryCalls InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection InterlockedIncrement EnterCriticalSection InterlockedDecrement lstrlenW MultiByteToWideChar lstrlenA GetShortPathNameA WideCharToMultiByte FreeLibrary SizeofResource LoadResource FindResourceA LoadLibraryExA lstrcmpiA GetWindowsDirectoryA CompareFileTime ReadFile FileTimeToSystemTime CreateDirectoryA CopyFileA lstrcpynA IsDBCSLeadByte HeapDestroy InterlockedExchange Sleep InterlockedCompareExchange RtlUnwind SetUnhandledExceptionFilter GetModuleHandleA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetLastError UnmapViewOfFile SetFileTime GetFileSize GetFileTime CloseHandle CreateFileA MapViewOfFile CreateFileMappingA SetEndOfFile SetFilePointer SetErrorMode LoadLibraryA GetModuleFileNameA GetProcAddress DeleteFileA GetLastError ExitThread EnumDateFormatsExA GetVersionExA GetTimeZoneInformation ReplaceFileA MoveFileWithProgressA

Sharing