jaffacakes118_Trojan-PSW[.]Win32[.]Hooker[.]j[.]403b3a87ccb45a0b9aaee0557b81146e

General

Target
jaffacakes118_Trojan-PSW.Win32.Hooker.j.403b3a87ccb45a0b9aaee0557b81146e
Size 55KB
Sample261014-ll4ttazt2m
SHA256 f1fe7bc11364b0359710a2ed2013bc71a221c1cf9afd547b616ae970e4b493a2
MD5 403b3a87ccb45a0b9aaee0557b81146e
SHA1 122af82e7d9b0dd6c7d03dd0e58310f4f30a7106
SHA512 deb07ebd55f04740158fbee4f11171caaf1b296292272a563f2ca7640a4239d2951be219f779372fb3c556dee4a62b8638e70a396f67784d55320adbead564a3
SSDEEP 768:sbKIMTm+Sjjlx+YcLaaWL2JQWIpzg9tdnz+:9IJxuLWoQWIpzuPni
TLSH
T1A0433A1F6CA740A7C482E9F000B58F3BEE7B963B5126B70B97504DA57994E80DD2E32D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-PSW.Win32.Hooker.j.403b3a87ccb45a0b9aaee0557b81146e

File Explorer

jaffacakes118_Trojan-PSW.Win32.Hooker.j.403b3a87ccb45a0b9aaee0557b81146e

.exe 55KB

jaffacakes118_Trojan-PSW.Win32.Hooker.j.403b3a87ccb45a0b9aaee0557b81146e

IMPHASH 4bcb754b9cb5cbc2d155e3a8a4044e96
SHA256 f1fe7bc11364b0359710a2ed2013bc71a221c1cf9afd547b616ae970e4b493a2
MD5 403b3a87ccb45a0b9aaee0557b81146e
SHA1 122af82e7d9b0dd6c7d03dd0e58310f4f30a7106
SHA512 deb07ebd55f04740158fbee4f11171caaf1b296292272a563f2ca7640a4239d2951be219f779372fb3c556dee4a62b8638e70a396f67784d55320adbead564a3
SSDEEP 768:sbKIMTm+Sjjlx+YcLaaWL2JQWIpzg9tdnz+:9IJxuLWoQWIpzuPni
TLSH
T1A0433A1F6CA740A7C482E9F000B58F3BEE7B963B5126B70B97504DA57994E80DD2E32D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16720

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetProcAddress GetSystemDirectoryA FreeLibrary LCMapStringW LCMapStringA MultiByteToWideChar SetEndOfFile CopyFileA GetWindowsDirectoryA GetModuleFileNameA GetLocalTime CreateProcessA ExitProcess GetStringTypeW GetStringTypeA FlushFileBuffers GetOEMCP GetACP GetCPInfo CreateFileA ReadFile VirtualFree SetStdHandle SetFilePointer HeapReAlloc VirtualAlloc WriteFile RtlUnwind TerminateProcess GetCurrentProcess GetTimeZoneInformation UnhandledExceptionFilter GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion HeapFree HeapAlloc GetLastError CloseHandle GetEnvironmentStrings GetEnvironmentStringsW FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte HeapDestroy HeapCreate SetHandleCount GetStdHandle GetFileType

advapi32

RegCreateKeyA RegQueryValueExA RegSetValueExA RegOpenKeyExA RegCloseKey RegEnumKeyExA

gdi32

GetDeviceCaps

rasapi32

RasGetEntryPropertiesA RasGetEntryDialParamsA RasEnumEntriesA

user32

SetTimer MessageBoxA GetMessageA ChangeDisplaySettingsA CharUpperBuffA

wsock32

recv gethostbyname connect gethostbyaddr closesocket WSACleanup htons WSAStartup inet_addr socket gethostname send

Sharing