jaffacakes118_Trojan[.]Win32[.]Snojan[.]bpqv[.]70d47bc56be1c87a2c638f8d8f2855dc

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Snojan.bpqv.70d47bc56be1c87a2c638f8d8f2855dc
Size 95KB
Sample261014-ml33yszy2j
SHA256 c7f129b71780967776da524d5f5baf21f651fa1ac2b5ebdd81e810293b09d25d
MD5 70d47bc56be1c87a2c638f8d8f2855dc
SHA1 61b9376e62a8830a799e5f6f95cbe300af535835
SHA512 5b9393f77c6fa4a68e1c70d546124ca9fbb4e18e5f92911b2b1508acabda6fa955303ca6fd2e4c718aabdacbf3023b0909453c80dc2e6563fc81c21e11fc8bf9
SSDEEP 1536:tFrNCa9RwFxIqXXZcBeVCV4aRQL827D8hdW+HkS3VuMS2O1YmI:tF/0HZFVm4aQL8+whY+TFS2O1YmI
TLSH
T19BA36A2176E6C432F1A2153269F4AB625E7EBE222B35D4CF335807AE0E702D15D38767
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_Trojan.Win32.Snojan.bpqv.70d47bc56be1c87a2c638f8d8f2855dc

File Explorer

jaffacakes118_Trojan.Win32.Snojan.bpqv.70d47bc56be1c87a2c638f8d8f2855dc

.exe 95KB

jaffacakes118_Trojan.Win32.Snojan.bpqv.70d47bc56be1c87a2c638f8d8f2855dc

IMPHASH 013c860b7bea8e9e95e936c8f97bcb0c
SHA256 c7f129b71780967776da524d5f5baf21f651fa1ac2b5ebdd81e810293b09d25d
MD5 70d47bc56be1c87a2c638f8d8f2855dc
SHA1 61b9376e62a8830a799e5f6f95cbe300af535835
SHA512 5b9393f77c6fa4a68e1c70d546124ca9fbb4e18e5f92911b2b1508acabda6fa955303ca6fd2e4c718aabdacbf3023b0909453c80dc2e6563fc81c21e11fc8bf9
SSDEEP 1536:tFrNCa9RwFxIqXXZcBeVCV4aRQL827D8hdW+HkS3VuMS2O1YmI:tF/0HZFVm4aQL8+whY+TFS2O1YmI
TLSH
T19BA36A2176E6C432F1A2153269F4AB625E7EBE222B35D4CF335807AE0E702D15D38767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e5:af:c0:16:06:12:5e:30:9d:b2:f8:c4:fc:3a:db:a5

Digest Algorithm

md5

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Sertz,OU=Sertz Devision,O=Sertz Company,L=Berlin,C=DE,1.2.840.113549.1.9.1=#0c107375706f727440536572747a2e636f6d

Chains

Jan 1, 0001

Minor OS version

Major OS version

Entry point

35981

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnterCriticalSection FindClose Process32FirstW OpenMutexA LocalAlloc DeviceIoControl GetModuleFileNameA Process32NextW lstrcmpiW GetModuleHandleA LoadLibraryExA lstrcatW CreateMutexA GetCurrentDirectoryA CreateToolhelp32Snapshot CloseHandle DeleteFileW LocalFree lstrcpyW DeleteFileA CreateThread lstrcpyA RtlUnwind GetStringTypeW GetCurrentProcessId QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetStdHandle ExitProcess HeapCreate IsProcessorFeaturePresent CopyFileA LCMapStringW GetCurrentThreadId SetLastError TlsFree TlsSetValue TlsGetValue TlsAlloc IsValidCodePage GetOEMCP GetACP InterlockedDecrement InterlockedIncrement GetCPInfo IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess RaiseException GetStartupInfoW HeapSetInformation GetCommandLineW DecodePointer EncodePointer VirtualQuery GetSystemInfo GetProcAddress FindFirstFileA SetCurrentDirectoryA InterlockedExchange GetTempPathW lstrlenW lstrcatA CreateFileW GetModuleFileNameW ReadFile LocalReAlloc LeaveCriticalSection GetVersionExW FormatMessageW SizeofResource CopyFileW Sleep GetSystemDefaultLangID LoadLibraryW WideCharToMultiByte WriteFile GetSystemTimeAsFileTime GetTickCount CreateDirectoryW LoadResource FreeLibrary FindResourceW GetLocaleInfoA lstrlenA GetFileSize GetModuleHandleW VirtualAlloc VirtualProtect GetProcessHeap HeapSize HeapReAlloc HeapFree HeapAlloc HeapDestroy DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetLastError CreateFileA MultiByteToWideChar

user32

CreateDialogParamW SwitchDesktop ShowWindow EnumChildWindows LoadStringW GetCursorPos GetDlgItemTextW SendMessageW OpenWindowStationW GetDlgItem SetThreadDesktop UpdateWindow GetWindowTextW SetRect LoadIconW TranslateMessage GetDC wsprintfW EnumWindows BeginPaint CloseDesktop GetClientRect CreateWindowExW GetClassNameW RegisterClassW wsprintfA OpenDesktopW LoadCursorW GetParent DefWindowProcW MoveWindow DispatchMessageW SetClassLongW EndPaint CreateDesktopW DestroyWindow SetProcessWindowStation GetWindowRect GetMessageW PostQuitMessage PostMessageW DrawTextW CloseWindowStation DialogBoxParamW

gdi32

SetTextColor DeleteDC CreateDIBSection GetDeviceCaps StretchBlt SetBkColor SetDIBColorTable DeleteObject SelectObject CreateCompatibleDC CreateRectRgnIndirect Rectangle FillRgn CreateFontW GetDIBColorTable GetObjectW CreateSolidBrush

advapi32

RegCreateKeyExA SetEntriesInAclA RegSetValueExW RegCloseKey RegDeleteValueW SetFileSecurityW OpenProcessToken SetSecurityDescriptorDacl RegQueryValueExW RegCreateKeyExW GetTokenInformation

shell32

ShellExecuteExW SHGetSpecialFolderPathW SHGetSpecialFolderPathA

ole32

CoInitialize CreateStreamOnHGlobal CoCreateInstance

shlwapi

StrStrW StrStrA

gdiplus

GdipCreateBitmapFromScan0 GdiplusShutdown GdipGetImagePixelFormat GdipCreateBitmapFromStream GdipGetImagePalette GdipDeleteGraphics GdipFree GdipGetImageHeight GdiplusStartup GdipGetImageWidth GdipCloneImage GdipBitmapLockBits GdipGetImagePaletteSize GdipDisposeImage GdipAlloc GdipDrawImageI GdipBitmapUnlockBits GdipGetImageGraphicsContext

msimg32

TransparentBlt AlphaBlend

comctl32

ord17

wininet

InternetReadFile InternetSetOptionA HttpOpenRequestA HttpSendRequestA InternetOpenA InternetCloseHandle InternetConnectA

imagehlp

CheckSumMappedFile