jaffacakes118_Trojan[.]Win32[.]Agent2[.]eweh[.]7fe3ce70945c94125b961d47611836a1

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Agent2.eweh.7fe3ce70945c94125b961d47611836a1
Size 91KB
Sample261015-z4bsmsc19y
SHA256 0586ac00334b9d6ced59f12e7e8ba1e218d2b90324a4c0f09e64c17d65cc46c6
MD5 7fe3ce70945c94125b961d47611836a1
SHA1 e080bcc3b8618c032dcf9ffec59c8cf3756e2b0d
SHA512 e2b9ee1390493961c4067fafcb3c3ead6e2760bbf679bdbec662ad976326815be2acb083ffdda82d956ed75f68a97b72b3ce1d36b61da0252ad209d15490bb27
SSDEEP 1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEFRL:NwtRonyypexoiNtxYGRL
TLSH
T1E493E0D2F8394146C0C9DFF215BA0E5E15B3AD6350B23A4E18C23CE4CBF6256662B61F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Agent2.eweh.7fe3ce70945c94125b961d47611836a1

File Explorer

jaffacakes118_Trojan.Win32.Agent2.eweh.7fe3ce70945c94125b961d47611836a1

.exe 91KB

jaffacakes118_Trojan.Win32.Agent2.eweh.7fe3ce70945c94125b961d47611836a1

IMPHASH c379aa5b7a9defd9e2b9ff675f6622af
SHA256 0586ac00334b9d6ced59f12e7e8ba1e218d2b90324a4c0f09e64c17d65cc46c6
MD5 7fe3ce70945c94125b961d47611836a1
SHA1 e080bcc3b8618c032dcf9ffec59c8cf3756e2b0d
SHA512 e2b9ee1390493961c4067fafcb3c3ead6e2760bbf679bdbec662ad976326815be2acb083ffdda82d956ed75f68a97b72b3ce1d36b61da0252ad209d15490bb27
SSDEEP 1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEFRL:NwtRonyypexoiNtxYGRL
TLSH
T1E493E0D2F8394146C0C9DFF215BA0E5E15B3AD6350B23A4E18C23CE4CBF6256662B61F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4777

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ntdll

RtlEqualUnicodeString RtlAdjustPrivilege ZwQuerySystemInformation ZwOpenProcess ZwMapViewOfSection ZwClose ZwCreateSection memcpy RtlImageNtHeader ZwUnmapViewOfSection LdrFindResource_U LdrAccessResource ZwQueryInformationProcess RtlUnwind

kernel32

RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA VirtualProtect GetSystemInfo GetStdHandle GetModuleHandleA GetProcAddress ExitProcess GetCommandLineA GetStartupInfoA SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount CreateRemoteThread GlobalAlloc GlobalFree FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW VirtualQuery WideCharToMultiByte GetLastError GetEnvironmentStringsW VirtualAlloc InterlockedExchange GetModuleFileNameA

user32

GetDC SetCapture GetWindowPlacement IsIconic IsZoomed ReleaseDC DrawTextW SetRect MessageBoxW FillRect OffsetRect InvertRect IntersectRect ReleaseCapture UpdateWindow PostMessageW PtInRect GetSubMenu GetDesktopWindow MoveWindow DefWindowProcW GetForegroundWindow ShowWindow GetSystemMetrics MessageBoxA LoadStringA SetDlgItemTextW GetDlgItem WinHelpW CheckDlgButton IsDlgButtonChecked CheckRadioButton GetDlgItemTextW UnionRect SendMessageW SetTimer LoadBitmapW GetClientRect GetParent LoadStringW DialogBoxParamW GetMenu EnableMenuItem EndDialog InvalidateRect GetWindowRect DrawMenuBar PeekMessageW FrameRect

gdi32

CreateSolidBrush GetDIBits DeleteDC DeleteObject BitBlt SelectObject CreateCompatibleDC LineTo MoveToEx SetPixel SetTextColor SetBkMode GetTextColor GetBkMode ExcludeClipRect GdiFlush GetPixel GetTextExtentPoint32W Ellipse CreateFontIndirectW GetDeviceCaps SaveDC GetStockObject CreateCompatibleBitmap

gdiplus

GdiplusStartup GdipGetImageWidth GdipGetImageHeight GdipCreateHBITMAPFromBitmap GdipDisposeImage GdipCreateBitmapFromStream GdiplusShutdown

ole32

CreateStreamOnHGlobal