jaffacakes118_Trojan-Downloader[.]Win32[.]Avalod[.]ac[.]5bc1b3a20a9da43cc72bde02b4148c4a

General

Target
jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.5bc1b3a20a9da43cc72bde02b4148c4a
Size 76KB
Sample261012-x4gmsaee22
SHA256 71dc9236553495e07dcffa911c528fae9f070a4e2ef7b34c44e451e2a32f0b69
MD5 5bc1b3a20a9da43cc72bde02b4148c4a
SHA1 db7ea7c32688e9c5ef57f7f53757f685ea22bf2d
SHA512 076d899d42e2954bc852cdb92473d59e2987ce3e4da0a257971ade913856f0b98e73a1a971f19dcf234e89a313c3bf268d0202ede50b34f2b1feedd071c86357
SSDEEP 1536:LyxfR1rwXj6XBJfa7kWmObh0JY1htjaiCNL3+qoziux5:OtP0GXBcvmah0JY70vp3+tR5
TLSH
T1C6734A0257259B43D4E600F9F557EFAE74A879323C016F5F539C686FD6222F0AD2238A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.5bc1b3a20a9da43cc72bde02b4148c4a

File Explorer

jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.5bc1b3a20a9da43cc72bde02b4148c4a

.dll 76KB

jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.5bc1b3a20a9da43cc72bde02b4148c4a

IMPHASH 9b592ce9da147ff2a534556dd57e5d9f
SHA256 71dc9236553495e07dcffa911c528fae9f070a4e2ef7b34c44e451e2a32f0b69
MD5 5bc1b3a20a9da43cc72bde02b4148c4a
SHA1 db7ea7c32688e9c5ef57f7f53757f685ea22bf2d
SHA512 076d899d42e2954bc852cdb92473d59e2987ce3e4da0a257971ade913856f0b98e73a1a971f19dcf234e89a313c3bf268d0202ede50b34f2b1feedd071c86357
SSDEEP 1536:LyxfR1rwXj6XBJfa7kWmObh0JY1htjaiCNL3+qoziux5:OtP0GXBcvmah0JY70vp3+tR5
TLSH
T1C6734A0257259B43D4E600F9F557EFAE74A879323C016F5F539C686FD6222F0AD2238A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12496

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

ExitProcess Beep QueryPerformanceFrequency HeapFree HeapAlloc GetProcessHeap DeviceIoControl GetCommConfig GlobalAlloc SystemTimeToFileTime GetSystemTime DisableThreadLibraryCalls InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection InterlockedIncrement EnterCriticalSection InterlockedDecrement lstrlenW MultiByteToWideChar lstrlenA GetShortPathNameA WideCharToMultiByte FreeLibrary SizeofResource LoadResource FindResourceA LoadLibraryExA lstrcmpiA GetWindowsDirectoryA CompareFileTime ReadFile FileTimeToSystemTime CreateDirectoryA CopyFileA lstrcpynA IsDBCSLeadByte HeapDestroy InterlockedExchange Sleep InterlockedCompareExchange RtlUnwind SetUnhandledExceptionFilter GetModuleHandleA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetLastError UnmapViewOfFile SetFileTime GetFileSize GetFileTime CloseHandle CreateFileA MapViewOfFile CreateFileMappingA SetEndOfFile SetFilePointer SetErrorMode LoadLibraryA GetModuleFileNameA GetProcAddress DeleteFileA GetLastError ExitThread EnumDateFormatsExA GetVersionExA GetTimeZoneInformation ReplaceFileA MoveFileWithProgressA

Sharing