jaffacakes118_Trojan[.]Win32[.]Chapak[.]avcp[.]a63c26ccb2fe0fe0f6e783cf78dad0d2

General

Target
jaffacakes118_Trojan.Win32.Chapak.avcp.a63c26ccb2fe0fe0f6e783cf78dad0d2
Size 108KB
Sample261018-16dkpawsas
SHA256 8c87116c942dc756ee5e57268aa6370f69487c49096b8c05f6124cdfe246c36b
MD5 a63c26ccb2fe0fe0f6e783cf78dad0d2
SHA1 da2870f17216ff06932eca2365b24126452f77e0
SHA512 069ed3632916806faea8fd69276dbf9d120665c3f170a375fa44d41bda2e3a77083591c1c1225d98fb243b229927a2375a18c396a474cb49a09a17e2539e62cd
SSDEEP 1536:URw0FaTyWcu+dqa3DA7mOkbS++cjygDEhsWjcdWvZYBuO1QFQUY7zByPULU2vV:SaTi9zHS+Hy6EOSZYBxQFC7zBC72vV
TLSH
T17AB38B1336E1C4B1F563063618B49F42567FFE619BB59E9F3788124E1A342D08B72BA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Chapak.avcp.a63c26ccb2fe0fe0f6e783cf78dad0d2

File Explorer

jaffacakes118_Trojan.Win32.Chapak.avcp.a63c26ccb2fe0fe0f6e783cf78dad0d2

.exe 108KB

jaffacakes118_Trojan.Win32.Chapak.avcp.a63c26ccb2fe0fe0f6e783cf78dad0d2

IMPHASH b7dbfcd400f7ab6c14e4173c2f3b1efd
SHA256 8c87116c942dc756ee5e57268aa6370f69487c49096b8c05f6124cdfe246c36b
MD5 a63c26ccb2fe0fe0f6e783cf78dad0d2
SHA1 da2870f17216ff06932eca2365b24126452f77e0
SHA512 069ed3632916806faea8fd69276dbf9d120665c3f170a375fa44d41bda2e3a77083591c1c1225d98fb243b229927a2375a18c396a474cb49a09a17e2539e62cd
SSDEEP 1536:URw0FaTyWcu+dqa3DA7mOkbS++cjygDEhsWjcdWvZYBuO1QFQUY7zByPULU2vV:SaTi9zHS+Hy6EOSZYBxQFC7zBC72vV
TLSH
T17AB38B1336E1C4B1F563063618B49F42567FFE619BB59E9F3788124E1A342D08B72BA3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

11113

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess SetProcessAffinityMask GetProcessIoCounters GetCurrentProcess GetCommConfig TerminateThread GetSystemTimeAdjustment SetComputerNameExW lstrcatA GetTempPathW GetStdHandle GetHandleInformation GetLastError GetProcAddress VirtualAlloc LoadLibraryA GetProcessWorkingSetSize AddAtomW AddAtomA OpenJobObjectW GetThreadPriority GetProcessShutdownParameters GetProcessAffinityMask CloseHandle lstrcpyA WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP EncodePointer DecodePointer HeapReAlloc GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent HeapAlloc GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize SetLastError GetCurrentThreadId HeapFree GetProcessHeap GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsDebuggerPresent EnterCriticalSection LeaveCriticalSection LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo LCMapStringW OutputDebugStringW GetStringTypeW FlushFileBuffers CreateFileW

msimg32

TransparentBlt AlphaBlend

winhttp

WinHttpCloseHandle

Sharing