jaffacakes118_Trojan[.]Win32[.]Chapak[.]ayaw[.]24293996f8f11323226fa1ceb6cd2f7f

General

Target
jaffacakes118_Trojan.Win32.Chapak.ayaw.24293996f8f11323226fa1ceb6cd2f7f
Size 4.1MB
Sample261018-166lgabs71
SHA256 d991aade5bab199ffed94dbd004b11e709daa3b257eb2e8be2cc8b6cf62f121f
MD5 24293996f8f11323226fa1ceb6cd2f7f
SHA1 d2f6525706493a975e163d0fe41b40338e48bc4b
SHA512 8291c3fc6695285c898d9f3446a30160715d6c1a1f4a76f7c633b7344768264111e561a142dec1466517f3073dab3ea69a2c23ad37a00e6fc56f34a9e183e71e
SSDEEP 98304:5M0Jhw4ZAqCUa8ne3897dkcrI0J5EVG8MWKcoZK7nq1HOfynLv:5N5CUaMeouLKLctbq8fsb
TLSH
T1591623172142EE3AD055F63AE493E73D227BC8155E628342A7B28EB18F71EF197D404E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Chapak.ayaw.24293996f8f11323226fa1ceb6cd2f7f

File Explorer

jaffacakes118_Trojan.Win32.Chapak.ayaw.24293996f8f11323226fa1ceb6cd2f7f

.exe 4.1MB

jaffacakes118_Trojan.Win32.Chapak.ayaw.24293996f8f11323226fa1ceb6cd2f7f

IMPHASH c3604ce19b6e7d3a76e8d5dcae9e39d6
SHA256 d991aade5bab199ffed94dbd004b11e709daa3b257eb2e8be2cc8b6cf62f121f
MD5 24293996f8f11323226fa1ceb6cd2f7f
SHA1 d2f6525706493a975e163d0fe41b40338e48bc4b
SHA512 8291c3fc6695285c898d9f3446a30160715d6c1a1f4a76f7c633b7344768264111e561a142dec1466517f3073dab3ea69a2c23ad37a00e6fc56f34a9e183e71e
SSDEEP 98304:5M0Jhw4ZAqCUa8ne3897dkcrI0J5EVG8MWKcoZK7nq1HOfynLv:5N5CUaMeouLKLctbq8fsb
TLSH
T1591623172142EE3AD055F63AE493E73D227BC8155E628342A7B28EB18F71EF197D404E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8411

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount LoadLibraryW TerminateThread GetSystemTimeAdjustment TerminateProcess GetMailslotInfo GetLastError SetLastError LocalAlloc AddAtomA FindAtomA FatalExit VirtualProtect FreeEnvironmentStringsA WriteConsoleW GetConsoleOutputCP WriteConsoleA ReadFile GetProcessHeap SetEndOfFile SetFilePointer SetStdHandle FlushFileBuffers GetConsoleMode GetComputerNameW GetCPInfo WriteConsoleOutputCharacterW FindFirstChangeNotificationW GetSystemTime ExitProcess GetConsoleCP LoadLibraryA HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount HeapSize

user32

EndPaint LoadBitmapA DlgDirSelectExA GetMenu RegisterClassExW GetAltTabInfoA LoadCursorFromFileW GetRawInputDeviceInfoA GetDesktopWindow LoadImageA GetDlgCtrlID BeginPaint

gdi32

PlayMetaFileRecord SetPolyFillMode StretchDIBits SetStretchBltMode SetPixel

shell32

DragFinish DragQueryPoint ShellExecuteW DragAcceptFiles DragQueryFileA

Sharing