jaffacakes118_Trojan-Downloader[.]Win32[.]Avalod[.]ac[.]71f94038779fa8c3a208d5dd4de04df5

General

Target
jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.71f94038779fa8c3a208d5dd4de04df5
Size 80KB
Sample261012-x4mtsswt9q
SHA256 5942ebf666acb73bcdf727f8fae046f722115713229738010a0e9853d6757891
MD5 71f94038779fa8c3a208d5dd4de04df5
SHA1 f585912ef46c662f8f48cf9d8676596ebc4ebcb3
SHA512 4c986ad8e1649acaa3efc1657cbb5ae8171738e4dd58b7d7be61c3ee828a04f97efd4b5c13950654a4fba763e793aeb39626fe16388a3032aebd64cb767fce5b
SSDEEP 1536:pajnkND1r6V55eII0+zRdcGVL+/I+adCpWDoI:pa6D1r60n0+zRdcGVLo
TLSH
T1B48349135B519B07D4B901F9F467AFAE74A839313C009F6F938C196FC6265F1AD2238A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.71f94038779fa8c3a208d5dd4de04df5

File Explorer

jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.71f94038779fa8c3a208d5dd4de04df5

.dll 80KB

jaffacakes118_Trojan-Downloader.Win32.Avalod.ac.71f94038779fa8c3a208d5dd4de04df5

IMPHASH 22eed252400dfc65301636a6530fa3a6
SHA256 5942ebf666acb73bcdf727f8fae046f722115713229738010a0e9853d6757891
MD5 71f94038779fa8c3a208d5dd4de04df5
SHA1 f585912ef46c662f8f48cf9d8676596ebc4ebcb3
SHA512 4c986ad8e1649acaa3efc1657cbb5ae8171738e4dd58b7d7be61c3ee828a04f97efd4b5c13950654a4fba763e793aeb39626fe16388a3032aebd64cb767fce5b
SSDEEP 1536:pajnkND1r6V55eII0+zRdcGVL+/I+adCpWDoI:pa6D1r60n0+zRdcGVLo
TLSH
T1B48349135B519B07D4B901F9F467AFAE74A839313C009F6F938C196FC6265F1AD2238A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12411

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

ExitProcess Beep QueryPerformanceFrequency HeapFree HeapAlloc GetProcessHeap DeviceIoControl GetCommConfig GlobalAlloc SystemTimeToFileTime GetSystemTime DisableThreadLibraryCalls InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection InterlockedIncrement EnterCriticalSection InterlockedDecrement lstrlenW MultiByteToWideChar lstrlenA GetShortPathNameA WideCharToMultiByte FreeLibrary SizeofResource LoadResource FindResourceA LoadLibraryExA lstrcmpiA GetWindowsDirectoryA CompareFileTime ReadFile FileTimeToSystemTime CreateDirectoryA CopyFileA lstrcpynA IsDBCSLeadByte HeapDestroy InterlockedExchange Sleep InterlockedCompareExchange RtlUnwind SetUnhandledExceptionFilter GetModuleHandleA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetLastError UnmapViewOfFile SetFileTime GetFileSize GetFileTime CloseHandle CreateFileA MapViewOfFile CreateFileMappingA SetEndOfFile SetFilePointer SetErrorMode LoadLibraryA GetModuleFileNameA GetProcAddress DeleteFileA GetLastError ExitThread EnumDateFormatsExA ReadFileEx

Sharing