jaffacakes118_Trojan-Downloader[.]Win32[.]Small[.]bnf[.]b470b5a9bcb22a22af425b90a4470618

General

Target
jaffacakes118_Trojan-Downloader.Win32.Small.bnf.b470b5a9bcb22a22af425b90a4470618
Size 37KB
Sample261012-yaqh9set3v
SHA256 14b0a3e1f427096ee581463136db4fb4f4485b72d25c7fd025b880600dfe8755
MD5 b470b5a9bcb22a22af425b90a4470618
SHA1 f1efbce5e12877a8ea46ad43913a49f8852a1443
SHA512 040cff6bb6f3a4fe67ece571d416de18533bc6cc2003bd5a7dbc42085b6c092233b675299d1d01fce43badb6b4805d2478c49019f48b1cabb47fc79f4bc16fe7
SSDEEP 768:ck2IlruH4eFUUG5uPZHx1gdgE3EP0xVRWn36vrDl:B2KruHrFUU8uPBgdgEUPAxjDl
TLSH
T1E1036C27B890D2F3C48245B5017D9B4A6F3B6116C3F422DBAB640A5DAF133E4993E397
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.Small.bnf.b470b5a9bcb22a22af425b90a4470618

File Explorer

jaffacakes118_Trojan-Downloader.Win32.Small.bnf.b470b5a9bcb22a22af425b90a4470618

.exe 37KB

jaffacakes118_Trojan-Downloader.Win32.Small.bnf.b470b5a9bcb22a22af425b90a4470618

IMPHASH 767b0e1db58672d1cffbbedefc10d095
SHA256 14b0a3e1f427096ee581463136db4fb4f4485b72d25c7fd025b880600dfe8755
MD5 b470b5a9bcb22a22af425b90a4470618
SHA1 f1efbce5e12877a8ea46ad43913a49f8852a1443
SHA512 040cff6bb6f3a4fe67ece571d416de18533bc6cc2003bd5a7dbc42085b6c092233b675299d1d01fce43badb6b4805d2478c49019f48b1cabb47fc79f4bc16fe7
SSDEEP 768:ck2IlruH4eFUUG5uPZHx1gdgE3EP0xVRWn36vrDl:B2KruHrFUU8uPBgdgEUPAxjDl
TLSH
T1E1036C27B890D2F3C48245B5017D9B4A6F3B6116C3F422DBAB640A5DAF133E4993E397
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15588

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Data\cPp\Deception\Deception\Release\Deception.pdb

kernel32

GetWindowsDirectoryA GetTempPathA FreeResource CloseHandle WriteFile SizeofResource CreateFileA LockResource LoadResource FindResourceA SetFileTime SetFileAttributesA GetFileTime GetSystemDirectoryA ReadFile CopyFileA Sleep DeleteFileA CreateThread GetModuleFileNameA SetLastError OpenProcess GetPriorityClass ResumeThread HeapSize LCMapStringW LCMapStringA GetLocalTime LoadLibraryA GetModuleHandleA GetProcAddress WaitForSingleObject CreateProcessA WriteProcessMemory GetSystemInfo VirtualProtect ExitProcess GetSystemTimeAsFileTime GetStartupInfoA GetCommandLineA GetVersionExA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId HeapFree HeapAlloc TerminateProcess GetCurrentProcess GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType HeapDestroy HeapCreate VirtualFree RtlUnwind InterlockedExchange VirtualQuery GetStringTypeA MultiByteToWideChar GetStringTypeW GetACP GetOEMCP GetCPInfo VirtualAlloc HeapReAlloc GetLocaleInfoA CreateRemoteThread

user32

GetParent GetWindowThreadProcessId ShowWindow MessageBoxA GetWindow FindWindowA

advapi32

RegOpenKeyA RegQueryValueExA RegCreateKeyExA RegDeleteValueA RegCloseKey RegSetValueExA

shell32

ShellExecuteA

Sharing