jaffacakes118_Trojan[.]Win32[.]Agent[.]neutwb[.]b5910e9971d1a1567f68e45038cfe9e4

General

Target
jaffacakes118_Trojan.Win32.Agent.neutwb.b5910e9971d1a1567f68e45038cfe9e4
Size 119KB
Sample261015-2xe8laev7m
SHA256 31ef894bde9ad78cd1db944e55152a6adc315126d1df7ac87d2921f79c3a1940
MD5 b5910e9971d1a1567f68e45038cfe9e4
SHA1 29e08f8973d9091a7985240eb5ef160b058efba2
SHA512 f8681611d9ebefc97add27e69e1616fa3f77b10efb566262111a7280efb21025d7ca4c4588afed2c215d5499ecf24b13d57d9a837144269271b2d607a491cdeb
SSDEEP 1536:/2czeS72O062CLQKaK0PUjs3gGs0w5ePPHChSu7Zkfq4Asy1uDX/OZ1rww/xC:5QO0SLpaKY73RZ+37Zs/An0OXUw/g
TLSH
T1F8C3F1E09267DDAFC5644271F938DF3DC89762DD2004AA573BD055B77BA73A0AE8C840
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Agent.neutwb.b5910e9971d1a1567f68e45038cfe9e4

File Explorer

jaffacakes118_Trojan.Win32.Agent.neutwb.b5910e9971d1a1567f68e45038cfe9e4

.exe 119KB

jaffacakes118_Trojan.Win32.Agent.neutwb.b5910e9971d1a1567f68e45038cfe9e4

IMPHASH e235a9ab173d958bd1d241507fc028a6
SHA256 31ef894bde9ad78cd1db944e55152a6adc315126d1df7ac87d2921f79c3a1940
MD5 b5910e9971d1a1567f68e45038cfe9e4
SHA1 29e08f8973d9091a7985240eb5ef160b058efba2
SHA512 f8681611d9ebefc97add27e69e1616fa3f77b10efb566262111a7280efb21025d7ca4c4588afed2c215d5499ecf24b13d57d9a837144269271b2d607a491cdeb
SSDEEP 1536:/2czeS72O062CLQKaK0PUjs3gGs0w5ePPHChSu7Zkfq4Asy1uDX/OZ1rww/xC:5QO0SLpaKY73RZ+37Zs/An0OXUw/g
TLSH
T1F8C3F1E09267DDAFC5644271F938DF3DC89762DD2004AA573BD055B77BA73A0AE8C840
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

395760

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

lgso.vyu

Size

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

mp6.b6p9

Size

113KB

Virtual Size

116KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

h933mm1q

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_Trojan.Win32.Agent.neutwb.b5910e9971d1a1567f68e45038cfe9e4

kernel32

user32

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_Trojan.Win32.Agent.neutwb.b5910e9971d1a1567f68e45038cfe9e4

kernel32

user32

generic