jaffacakes118_Trojan[.]Win32[.]Chapak[.]asft[.]18a1efd5b3d7d9f4e70c33cec9e7e483

General

Target
jaffacakes118_Trojan.Win32.Chapak.asft.18a1efd5b3d7d9f4e70c33cec9e7e483
Size 1.1MB
Sample261018-15eflabs5w
SHA256 42875c8161d46680cda065edac2032d872608bb83ac6fed3fb64c461ae012e1d
MD5 18a1efd5b3d7d9f4e70c33cec9e7e483
SHA1 1554eb8b28c8b1fbb2799a4a7cc8f67fa2d6fa71
SHA512 2c42603bc3436c4755bf507405467efbb598dad8d8d03cfb4244dad0d6d0eeacdddab3be180eb89979741525c0e6617104980b053333b611d61a71e59a9c3abb
SSDEEP 12288:GRyIZoitwpXPt8C5IR6NQl26JsuoNQFwGmRcnINVtGvnXMOU744lA1WH:eygQpXl8lRmaYzCwGmRcnYc/3QwWH
TLSH
T191352312F5C2C0B1D077543895A0EAE54B2CFD491B546EAB3B6C913A5E302D2BF34EA7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Chapak.asft.18a1efd5b3d7d9f4e70c33cec9e7e483

File Explorer

jaffacakes118_Trojan.Win32.Chapak.asft.18a1efd5b3d7d9f4e70c33cec9e7e483

.exe 1.1MB

jaffacakes118_Trojan.Win32.Chapak.asft.18a1efd5b3d7d9f4e70c33cec9e7e483

IMPHASH d830eff4a59691fc2a872ba49e576fb7
SHA256 42875c8161d46680cda065edac2032d872608bb83ac6fed3fb64c461ae012e1d
MD5 18a1efd5b3d7d9f4e70c33cec9e7e483
SHA1 1554eb8b28c8b1fbb2799a4a7cc8f67fa2d6fa71
SHA512 2c42603bc3436c4755bf507405467efbb598dad8d8d03cfb4244dad0d6d0eeacdddab3be180eb89979741525c0e6617104980b053333b611d61a71e59a9c3abb
SSDEEP 12288:GRyIZoitwpXPt8C5IR6NQl26JsuoNQFwGmRcnINVtGvnXMOU744lA1WH:eygQpXl8lRmaYzCwGmRcnYc/3QwWH
TLSH
T191352312F5C2C0B1D077543895A0EAE54B2CFD491B546EAB3B6C913A5E302D2BF34EA7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5881

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jaffacakes118_Trojan.Win32.Chapak.asft.18a1efd5b3d7d9f4e70c33cec9e7e483

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_Trojan.Win32.Chapak.asft.18a1efd5b3d7d9f4e70c33cec9e7e483

kernel32

generic