jaffacakes118_Trojan[.]Win32[.]Chapak[.]axza[.]a8daa9c49d07466f146a96953a40fc82

General

Target
jaffacakes118_Trojan.Win32.Chapak.axza.a8daa9c49d07466f146a96953a40fc82
Size 1.8MB
Sample261012-y8ffyszzds
SHA256 87f5e925c56eccb0ecccb8c042dd2801fab11643aac77518fd79016ec3cafcc5
MD5 a8daa9c49d07466f146a96953a40fc82
SHA1 5bc7215740acc910de831344a0628b91efe5de99
SHA512 b2ce99bbc0483859e5976a687a567ce0f6923051a91b6d8b50392206d5fdee8f214894f8758f5b2734f812f49c4aa99fba92d64d0c30265a77b3ff9926e2f168
SSDEEP 24576:BZKWmwHfAwVSFmJErcLvCtUFJxLa+iLBRHsxLa+iLBRHwxLa+iLBRHku:PKLw/AwZyIC+G+ilRZ+ilRN+ilREu
TLSH
T1CC951222B5928A73C67705700CE6C27D263EB6100F615D2FAFCC4B2E9FB52817963967
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Chapak.axza.a8daa9c49d07466f146a96953a40fc82

File Explorer

jaffacakes118_Trojan.Win32.Chapak.axza.a8daa9c49d07466f146a96953a40fc82

.exe 1.8MB

jaffacakes118_Trojan.Win32.Chapak.axza.a8daa9c49d07466f146a96953a40fc82

IMPHASH 44d07cc8d9b85b5b6b22fc423f918019
SHA256 87f5e925c56eccb0ecccb8c042dd2801fab11643aac77518fd79016ec3cafcc5
MD5 a8daa9c49d07466f146a96953a40fc82
SHA1 5bc7215740acc910de831344a0628b91efe5de99
SHA512 b2ce99bbc0483859e5976a687a567ce0f6923051a91b6d8b50392206d5fdee8f214894f8758f5b2734f812f49c4aa99fba92d64d0c30265a77b3ff9926e2f168
SSDEEP 24576:BZKWmwHfAwVSFmJErcLvCtUFJxLa+iLBRHsxLa+iLBRHwxLa+iLBRHku:PKLw/AwZyIC+G+ilRZ+ilRN+ilREu
TLSH
T1CC951222B5928A73C67705700CE6C27D263EB6100F615D2FAFCC4B2E9FB52817963967
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

52740

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetConsoleWindow VirtualProtect HeapSize ReadConsoleW WideCharToMultiByte EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo CloseHandle SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RaiseException RtlUnwind GetLastError FreeLibrary LoadLibraryExW HeapAlloc HeapReAlloc HeapFree ExitProcess GetModuleHandleExW GetModuleFileNameA GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetACP IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx GetProcessHeap FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetStdHandle WriteConsoleW CreateFileW

user32

ShowWindow

Name

.text

Size

139KB

Virtual Size

138KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

959KB

Virtual Size

958KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

792B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

769KB

Virtual Size

768KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_Trojan.Win32.Chapak.axza.a8daa9c49d07466f146a96953a40fc82

kernel32

user32

generic