jaffacakes118_Trojan[.]Win32[.]Fynben[.]a[.]f94b5bc713e4e0dd8dec7b7ad472109f

General

Target
jaffacakes118_Trojan.Win32.Fynben.a.f94b5bc713e4e0dd8dec7b7ad472109f
Size 24KB
Sample261014-ma3caabv3x
SHA256 d9c65fb4c33bdc4af9dd3ae2bea4c51c7bab7d8a44dde3ebc58a8775d5d289da
MD5 f94b5bc713e4e0dd8dec7b7ad472109f
SHA1 9223f78d39f37bd27c30cee1b89198dea67644bf
SHA512 40bd4bb1b17563b2de0ffd2e283d43215e04d44a9a3398cfe4cb28d00f3a3cbf1a819b7782171ea0ec2e61417c558c9f3ad931bc844a64abfadc19c8d5209719
SSDEEP 384:ZjVo1CId/efuu7zEeBezfbLq0F1CiyEUgt8Oom:ZgCIdmfuu7z4fbuSry
TLSH
T1D8B2F71BDAD20762E0294E70183E6F38D43780ED5B3097E39F94DC1C697E490893AB99
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Fynben.a.f94b5bc713e4e0dd8dec7b7ad472109f

File Explorer

jaffacakes118_Trojan.Win32.Fynben.a.f94b5bc713e4e0dd8dec7b7ad472109f

.exe 24KB

jaffacakes118_Trojan.Win32.Fynben.a.f94b5bc713e4e0dd8dec7b7ad472109f

IMPHASH 6dddec92ccc7c2e9bc3b599a1c3f6c40
SHA256 d9c65fb4c33bdc4af9dd3ae2bea4c51c7bab7d8a44dde3ebc58a8775d5d289da
MD5 f94b5bc713e4e0dd8dec7b7ad472109f
SHA1 9223f78d39f37bd27c30cee1b89198dea67644bf
SHA512 40bd4bb1b17563b2de0ffd2e283d43215e04d44a9a3398cfe4cb28d00f3a3cbf1a819b7782171ea0ec2e61417c558c9f3ad931bc844a64abfadc19c8d5209719
SSDEEP 384:ZjVo1CId/efuu7zEeBezfbLq0F1CiyEUgt8Oom:ZgCIdmfuu7z4fbuSry
TLSH
T1D8B2F71BDAD20762E0294E70183E6F38D43780ED5B3097E39F94DC1C697E490893AB99
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11312

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

send closesocket WSACleanup WSAStartup socket inet_addr gethostbyname gethostbyaddr htons connect recv

mfc42

ord825 ord800 ord540 ord537 ord924 ord860 ord858 ord823 ord4129 ord2764 ord4202 ord5683 ord2763 ord4277 ord922 ord535

msvcrt

_controlfp __getmainargs __p__commode _except_handler3 __set_app_type _initterm _exit _onexit __dllonexit rand _adjust_fdiv __setusermatherr exit _acmdln _XcptFilter sprintf _mbscmp __CxxFrameHandler srand time __p__fmode

kernel32

GetVersionExA CreateSemaphoreA GetStartupInfoA GetLastError CloseHandle GetModuleHandleA

user32

IsWindow GetWindow GetPropA GetDesktopWindow IsIconic ShowWindow SetForegroundWindow GetLastActivePopup

advapi32

RegCloseKey RegCreateKeyA RegSetValueExA

shell32

ShellExecuteA

msvcirt

??1ifstream@@UAE@XZ ??0ofstream@@QAE@XZ ?open@ifstream@@QAEXPBDHH@Z ??_Difstream@@QAEXXZ ?openprot@filebuf@@2HB ?close@ifstream@@QAEXXZ _mtunlock _mtlock ?get@istream@@IAEAAV1@PADHH@Z ??0ifstream@@QAE@XZ ??_Dofstream@@QAEXXZ ??1ios@@UAE@XZ ??1ofstream@@UAE@XZ ?close@ofstream@@QAEXXZ ?open@ofstream@@QAEXPBDHH@Z ?write@ostream@@QAEAAV1@PBDH@Z

Sharing