jaffacakes118_Trojan-Dropper[.]Win32[.]Mixus[.]gen[.]e07198603adaf8598a98b707701df012

General

Target
jaffacakes118_Trojan-Dropper.Win32.Mixus.gen.e07198603adaf8598a98b707701df012
Size 44KB
Sample261014-k7ftfasvbz
SHA256 3f84422493829ba603e7af9b76b5654c5b0d5e35c4352a1e93105ddce0ef55ed
MD5 e07198603adaf8598a98b707701df012
SHA1 805258713dbb40e0e92ff581ce4de0a74413ddd0
SHA512 f6935facf180e69277827e823ec6dcca3cad97413bb853bf1789a167f7ec9fc11d7e27af97bebefa5248d91719b55e7f684147b659a015b15e9ca26e0fdc0b08
SSDEEP 384:9fgDk1oWFYGaisBvHO8D+b7pf785FZJ9TT5ga7V1x+6MP:IEaiAvHb+dQfXBTV5146W
TLSH
T13713B70AF1C832EFE40467F82D7233E5E7ABC9F18A1D50447BDA1F586D79A92CD1490A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Mixus.gen.e07198603adaf8598a98b707701df012

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Mixus.gen.e07198603adaf8598a98b707701df012

.exe 44KB

jaffacakes118_Trojan-Dropper.Win32.Mixus.gen.e07198603adaf8598a98b707701df012

IMPHASH 7f4dc4293ff0ed6e96ace722ebe4bdcb
SHA256 3f84422493829ba603e7af9b76b5654c5b0d5e35c4352a1e93105ddce0ef55ed
MD5 e07198603adaf8598a98b707701df012
SHA1 805258713dbb40e0e92ff581ce4de0a74413ddd0
SHA512 f6935facf180e69277827e823ec6dcca3cad97413bb853bf1789a167f7ec9fc11d7e27af97bebefa5248d91719b55e7f684147b659a015b15e9ca26e0fdc0b08
SSDEEP 384:9fgDk1oWFYGaisBvHO8D+b7pf785FZJ9TT5ga7V1x+6MP:IEaiAvHb+dQfXBTV5146W
TLSH
T13713B70AF1C832EFE40467F82D7233E5E7ABC9F18A1D50447BDA1F586D79A92CD1490A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

StrRChrA

ole32

StringFromCLSID CoCreateGuid

user32

UnhookWindowsHookEx TranslateMessage SetWindowsHookExA SetTimer RegisterClassExA PostQuitMessage LoadIconA LoadCursorA KillTimer GetMessageA DispatchMessageA DefWindowProcA CreateWindowExA wsprintfA

kernel32

Sleep _lclose lstrlenA lstrcpyA lstrcmpA lstrcatA _lwrite _lread _lopen CloseHandle CopyFileA CreateFileA CreateFileMappingA CreateMutexA CreateProcessA CreateThread DeleteFileA ExitProcess FreeLibrary GetCommandLineA GetCurrentProcess GetFileSize GetModuleFileNameA GetModuleHandleA GetProcAddress GetSystemDirectoryA GetTickCount GetVersionExA GlobalAlloc GlobalFree LoadLibraryA MapViewOfFile OpenMutexA WinExec TerminateProcess UnmapViewOfFile WaitForSingleObject _lcreat

advapi32

RegQueryInfoKeyA IsValidAcl SetSecurityInfo RegSetValueExA RegQueryValueExA InitializeAcl RegOpenKeyExA RegCreateKeyA RegCloseKey

ws2_32

socket shutdown send WSACleanup WSAStartup __WSAFDIsSet accept bind closesocket connect gethostbyname gethostname getsockname htonl htons inet_ntoa listen recv select

Sharing