jaffacakes118_Trojan[.]Win32[.]Agent[.]qwggut[.]49983b7c7f2763238dc71c48769b4610

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Agent.qwggut.49983b7c7f2763238dc71c48769b4610
Size 408KB
Sample261015-29dwasd19s
SHA256 a8881ec6d4a8842f2714402aa0c069528a7e7a23aeae91b37deab6ac0f942877
MD5 49983b7c7f2763238dc71c48769b4610
SHA1 73d8071af949933b6224ecd944fc1f14b2659414
SHA512 d7fe79153b50d670247214d5a79ecf5021226cb77e332867c1223a674f5609b2c2a4eecc674f0f792d555cf606e593f543bbc13853cd41d70f75a05a2ef512e8
SSDEEP 6144:WDqLEl44f5cthyboUK+OKrHHY7dfTdrGSn1kFeGFFVQppHF8ariv:WwXtExRKZ6sppHF8
TLSH
T15194095B661D2E27F116A0F888BD896FA3072DB021B05BC237CDFF4956716829321F5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Agent.qwggut.49983b7c7f2763238dc71c48769b4610

File Explorer

jaffacakes118_Trojan.Win32.Agent.qwggut.49983b7c7f2763238dc71c48769b4610

.exe 408KB

jaffacakes118_Trojan.Win32.Agent.qwggut.49983b7c7f2763238dc71c48769b4610

IMPHASH 291abc15032eb1be3767d6adf7a1afc8
SHA256 a8881ec6d4a8842f2714402aa0c069528a7e7a23aeae91b37deab6ac0f942877
MD5 49983b7c7f2763238dc71c48769b4610
SHA1 73d8071af949933b6224ecd944fc1f14b2659414
SHA512 d7fe79153b50d670247214d5a79ecf5021226cb77e332867c1223a674f5609b2c2a4eecc674f0f792d555cf606e593f543bbc13853cd41d70f75a05a2ef512e8
SSDEEP 6144:WDqLEl44f5cthyboUK+OKrHHY7dfTdrGSn1kFeGFFVQppHF8ariv:WwXtExRKZ6sppHF8
TLSH
T15194095B661D2E27F116A0F888BD896FA3072DB021B05BC237CDFF4956716829321F5B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

149968

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord5199 ord2396 ord3346 ord5300 ord5302 ord2725 ord4079 ord4698 ord5307 ord5289 ord5714 ord2982 ord3147 ord3259 ord4465 ord3136 ord3262 ord2985 ord3081 ord2976 ord3830 ord3831 ord3825 ord3079 ord4080 ord4622 ord4424 ord3738 ord561 ord825 ord815 ord2514 ord641 ord686 ord692 ord5265 ord4376 ord4853 ord4998 ord6052 ord4078 ord1775 ord4407 ord5241 ord2385 ord5163 ord6374 ord4353 ord5280 ord3798 ord4837 ord4441 ord1089 ord2055 ord6376 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord4627 ord4425 ord3597 ord384 ord324 ord2302 ord4234 ord2097 ord4710 ord755 ord470 ord1168 ord2379 ord1146 ord4275 ord1771 ord6366 ord2413 ord2024 ord2581 ord6055 ord1776 ord5290 ord2099 ord823 ord640 ord283 ord323 ord4123 ord2859 ord3797 ord4401 ord1847 ord3573 ord3626 ord2414 ord3663 ord1640 ord4219 ord3402 ord3639 ord567 ord3922 ord5731 ord2512 ord2554 ord4486 ord6375 ord4274 ord2648 ord4673 ord1576

msvcrt

exit _acmdln __getmainargs _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm _setmbcp memcpy __CxxFrameHandler _XcptFilter _exit _onexit __dllonexit

kernel32

GetModuleHandleA GetStartupInfoA

user32

DrawFocusRect FillRect GetSysColor LoadIconA EnableWindow GetClientRect IsIconic SendMessageA DrawIcon GetSystemMetrics GetProcessWindowStation EnumDesktopsA CopyRect

gdi32

CreateCompatibleDC

comctl32

ImageList_GetImageInfo ImageList_Draw ImageList_GetImageCount

msvcp60

??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z ??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z ??0Init@ios_base@std@@QAE@XZ