jaffacakes118_Trojan-GameThief[.]Win32[.]Magania[.]tzio[.]9e6edb444896beb858427a133919ab6e

General

Target
jaffacakes118_Trojan-GameThief.Win32.Magania.tzio.9e6edb444896beb858427a133919ab6e
Size 141KB
Sample261014-lftfwsfd93
SHA256 5ea088511d4a3e42606f5e382fe096794888f18ecc1fd5c301c3205a5af67223
MD5 9e6edb444896beb858427a133919ab6e
SHA1 ef97e192879fd695dcf929cbe266de0a0e48f3a3
SHA512 915186cea790bd8de4d2eb5c5ce7aae664a2bb073e111d5f756d3b42a761fa4fcdfed29c5a7d2c7e7923dd6dd1694c9674c1006653a45ce5905a14acd93f3045
SSDEEP 3072:+HcxWthDtm+mZO1gJX+K+wuDdrylpgqVR6SbwQY0uG62clCttC7BS:+H3I+mZ0gJ7ADlYpgq+SbwQx
TLSH
T1EFE38D1279D040BAE1FA043C55BE3B36DB7FA4744A29C943F72496492CB1969DB22F83
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-GameThief.Win32.Magania.tzio.9e6edb444896beb858427a133919ab6e

File Explorer

jaffacakes118_Trojan-GameThief.Win32.Magania.tzio.9e6edb444896beb858427a133919ab6e

.exe 141KB

jaffacakes118_Trojan-GameThief.Win32.Magania.tzio.9e6edb444896beb858427a133919ab6e

IMPHASH d9d32f4b2eaabbbc228c4cdf165f7019
SHA256 5ea088511d4a3e42606f5e382fe096794888f18ecc1fd5c301c3205a5af67223
MD5 9e6edb444896beb858427a133919ab6e
SHA1 ef97e192879fd695dcf929cbe266de0a0e48f3a3
SHA512 915186cea790bd8de4d2eb5c5ce7aae664a2bb073e111d5f756d3b42a761fa4fcdfed29c5a7d2c7e7923dd6dd1694c9674c1006653a45ce5905a14acd93f3045
SSDEEP 3072:+HcxWthDtm+mZO1gJX+K+wuDdrylpgqVR6SbwQY0uG62clCttC7BS:+H3I+mZ0gJ7ADlYpgq+SbwQx
TLSH
T1EFE38D1279D040BAE1FA043C55BE3B36DB7FA4744A29C943F72496492CB1969DB22F83
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6111

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegSetValueExA RegOpenKeyA RegCreateKeyExA StartServiceA ControlService ChangeServiceConfigA OpenServiceA OpenSCManagerA

user32

wsprintfA

kernel32

CloseHandle FreeResource Sleep WriteFile CreateFileA DeleteFileA LockResource GetProcAddress LoadLibraryA lstrcmpiA CreateToolhelp32Snapshot GetLocalTime GetModuleFileNameA WaitForSingleObject CreateEventA ExitProcess WinExec lstrlenA SetFilePointer GetWindowsDirectoryA GetTickCount GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion HeapAlloc GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue GetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType DeleteCriticalSection GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree HeapFree RtlUnwind VirtualAlloc HeapReAlloc InitializeCriticalSection EnterCriticalSection LeaveCriticalSection InterlockedDecrement InterlockedIncrement GetCPInfo GetACP GetOEMCP SetStdHandle MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers

Sharing