jaffacakes118_Trojan-Dropper[.]Win32[.]Agent[.]bjqwqj[.]f7bdf1db68a79a7ce32f081d39e033b6

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Dropper.Win32.Agent.bjqwqj.f7bdf1db68a79a7ce32f081d39e033b6
Size 417KB
Sample261012-ycsfmset6w
SHA256 2a48e91b2bba541da9b1f2245a948f80bbc01c976fb0fc2b931cec1e1f6db1e7
MD5 f7bdf1db68a79a7ce32f081d39e033b6
SHA1 d2c043da7b75a462d5349b508cdafe0bd7394a28
SHA512 331812d63a7b37d922e922c122be72848722255bf63f446f1ea0cb0536760cf684793cae7532bd44a13786c1272e0e9dd79e19f2b0e23b7d21774c50d0c45e32
SSDEEP 12288:vzX5ktjiUkppxll0Y7XF5vMNuAWSEd2Avsvjd6Gn/+Y6t/OiWEITQx:vzX5Kjgpprl9vM0vVdEvgGn2YoWi6Qx
TLSH
T1249423739A55ADF2D4C44179747BAD23867BE1639948C4CFA910DA18FC33520C3AF927
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Agent.bjqwqj.f7bdf1db68a79a7ce32f081d39e033b6

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Agent.bjqwqj.f7bdf1db68a79a7ce32f081d39e033b6

.exe 417KB

jaffacakes118_Trojan-Dropper.Win32.Agent.bjqwqj.f7bdf1db68a79a7ce32f081d39e033b6

IMPHASH 78c751010579c51cdad3f096a3cbcc97
SHA256 2a48e91b2bba541da9b1f2245a948f80bbc01c976fb0fc2b931cec1e1f6db1e7
MD5 f7bdf1db68a79a7ce32f081d39e033b6
SHA1 d2c043da7b75a462d5349b508cdafe0bd7394a28
SHA512 331812d63a7b37d922e922c122be72848722255bf63f446f1ea0cb0536760cf684793cae7532bd44a13786c1272e0e9dd79e19f2b0e23b7d21774c50d0c45e32
SSDEEP 12288:vzX5ktjiUkppxll0Y7XF5vMNuAWSEd2Avsvjd6Gn/+Y6t/OiWEITQx:vzX5Kjgpprl9vM0vVdEvgGn2YoWi6Qx
TLSH
T1249423739A55ADF2D4C44179747BAD23867BE1639948C4CFA910DA18FC33520C3AF927
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ShellExecuteA FindExecutableA

user32

CharNextA DefWindowProcA GetWindowWord SetWindowWord BeginPaint GetSysColor GetClientRect SetRect EndPaint RegisterClassA OemToCharBuffA LoadCursorA GetLastActivePopup ShowWindow PostMessageA EnableWindow DestroyWindow SetWindowTextA SetForegroundWindow SetActiveWindow GetWindowRect SetTimer KillTimer DialogBoxIndirectParamA GetDlgItemTextA EndDialog SendMessageA GetKeyState PeekMessageA TranslateMessage DispatchMessageA GetParent SetDlgItemTextA SendDlgItemMessageA GetDlgItem InvalidateRect UpdateWindow wsprintfA MessageBoxA SetCursor GetSystemMetrics SetWindowPos

kernel32

CreateDirectoryA _lclose _lopen GlobalUnlock RtlUnwind GetCommandLineA GetModuleHandleA ExitProcess GetACP GetModuleFileNameA SetErrorMode GetVersion LoadLibraryA GetProcAddress FreeLibrary lstrcmpiA GetWindowsDirectoryA GetEnvironmentVariableA LocalAlloc LocalFree GlobalHandle lstrcpyA GlobalFree GlobalAlloc GlobalLock WinExec _llseek GetDriveTypeA _lread _lwrite GetVolumeInformationA FindClose FindFirstFileA GetCurrentDirectoryA SetCurrentDirectoryA lstrlenA lstrcatA SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime _lcreat

gdi32

GetBkColor SetBkColor SetTextColor SetTextAlign DeleteObject GetTextExtentPoint32A ExtTextOutA CreateDCA GetDeviceCaps CreateFontIndirectA DeleteDC SelectObject

advapi32

RegQueryValueA