jaffacakes118_Trojan[.]Win32[.]VBKrypt[.]wojo[.]0561cd9dda6dedcc9e6da843ac4638fa

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.VBKrypt.wojo.0561cd9dda6dedcc9e6da843ac4638fa
Size 485KB
Sample261014-mt8cmsbx8v
SHA256 5fb611fa9df2068efaf3a7ac39085455a2e308a3f80360f847ce76a2e403c0ac
MD5 0561cd9dda6dedcc9e6da843ac4638fa
SHA1 dcad647a957c6035556f94948f203cda09698c27
SHA512 6f8da3a5952b4b9275c571911a9666b62b4d9d3a767a537e8e9270d71038b313935c7e030479fcda1e96b78fa0805b87a8a4b3f7f34049f43dfccf47bcbbc7a3
SSDEEP 12288:eHcaqfk439IqLJd4ymAe/8dASYRa7GvX3cXvz/Ac:qcZfp39IqLJ0AjGPcXF
TLSH
T154B41201F784D077D8648A300DFAB174A238FC33BDA4A65E2B51759D2DB4691AC36F2E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.VBKrypt.wojo.0561cd9dda6dedcc9e6da843ac4638fa

File Explorer

jaffacakes118_Trojan.Win32.VBKrypt.wojo.0561cd9dda6dedcc9e6da843ac4638fa

.exe 485KB

jaffacakes118_Trojan.Win32.VBKrypt.wojo.0561cd9dda6dedcc9e6da843ac4638fa

IMPHASH c0e79495eea5ea137afed09deae06d3f
SHA256 5fb611fa9df2068efaf3a7ac39085455a2e308a3f80360f847ce76a2e403c0ac
MD5 0561cd9dda6dedcc9e6da843ac4638fa
SHA1 dcad647a957c6035556f94948f203cda09698c27
SHA512 6f8da3a5952b4b9275c571911a9666b62b4d9d3a767a537e8e9270d71038b313935c7e030479fcda1e96b78fa0805b87a8a4b3f7f34049f43dfccf47bcbbc7a3
SSDEEP 12288:eHcaqfk439IqLJd4ymAe/8dASYRa7GvX3cXvz/Ac:qcZfp39IqLJ0AjGPcXF
TLSH
T154B41201F784D077D8648A300DFAB174A238FC33BDA4A65E2B51759D2DB4691AC36F2E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA

kernel32

CloseHandle CompareStringA CreateDirectoryA CreateDirectoryW CreateFileA CreateFileW DeleteFileA DeleteFileW DosDateTimeToFileTime ExitProcess ExpandEnvironmentStringsA FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindResourceA FreeLibrary GetCPInfo GetCommandLineA GetCurrentDirectoryA GetDateFormatA GetFileAttributesA GetFileAttributesW GetFileType GetFullPathNameA GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetNumberFormatA GetProcAddress GetProcessHeap GetStdHandle GetTempPathA GetTickCount GetTimeFormatA GetVersionExA GlobalAlloc HeapAlloc HeapFree HeapReAlloc IsDBCSLeadByte LoadLibraryA LocalFileTimeToFileTime MoveFileA MoveFileExA MultiByteToWideChar OpenFile ReadFile SetCurrentDirectoryA SetEnvironmentVariableA SetFileAttributesA SetFileAttributesW SetFilePointer SetFileTime SetLastError SetVolumeLabelA Sleep SystemTimeToFileTime WaitForSingleObject WideCharToMultiByte WriteFile _lclose lstrcmpiA lstrlenA

comctl32

ord17

gdi32

DeleteObject

shell32

SHBrowseForFolderA SHChangeNotify SHFileOperationA SHGetFileInfoA SHGetMalloc SHGetSpecialFolderLocation ShellExecuteExA SHGetPathFromIDListA

user32

CharLowerA CharToOemA CharToOemBuffA CharUpperA CopyRect CreateWindowExA DefWindowProcA DestroyIcon DestroyWindow DialogBoxParamA DispatchMessageA EnableWindow EndDialog FindWindowExA GetClassNameA GetClientRect GetDlgItem GetDlgItemTextA GetMessageA GetParent GetSysColor GetSystemMetrics GetWindow GetWindowLongA GetWindowRect GetWindowTextA IsWindow IsWindowVisible LoadBitmapA LoadCursorA LoadIconA LoadStringA MapWindowPoints MessageBoxA OemToCharA OemToCharBuffA PeekMessageA PostMessageA RegisterClassExA SendDlgItemMessageA SendMessageA SetDlgItemTextA SetFocus SetMenu SetWindowLongA SetWindowPos SetWindowTextA ShowWindow TranslateMessage UpdateWindow WaitForInputIdle wsprintfA wvsprintfA

ole32

CLSIDFromString CoCreateInstance CreateStreamOnHGlobal OleInitialize OleUninitialize