jaffacakes118_Trojan[.]Win32[.]Chapak[.]bezm[.]ef82ab2e94d6b77d9adfdffa75b6c492

General

Target
jaffacakes118_Trojan.Win32.Chapak.bezm.ef82ab2e94d6b77d9adfdffa75b6c492
Size 1.0MB
Sample261018-18cfeawsct
SHA256 d97067e47d7db8dd18fa801f4fe71e9d94a5a3a683499557f149d42baa770e90
MD5 ef82ab2e94d6b77d9adfdffa75b6c492
SHA1 5f54feb5c1dd7eaeea03d76128d045e8bbf4261c
SHA512 18f7ec0a4a0a6cb2133139840c788230d3f16e81b0c085347ad5a6c478df3c05457be01c8f64c2436ca0ffa6835e16bf3f4d062a3333f8d2cc8033fc0ffe2627
SSDEEP 24576:2b1sGPHNZuP/BBrhORfqh9R1wfgtcIrZH6p18GaZyPa:2ZcP/BeRfqh90fgBdHAW2Pa
TLSH
T19D25D01075A2E03BD9B340B5CDBC966D512CAA300F7249EFA3C82A1E5F759D19B31A37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Chapak.bezm.ef82ab2e94d6b77d9adfdffa75b6c492

File Explorer

jaffacakes118_Trojan.Win32.Chapak.bezm.ef82ab2e94d6b77d9adfdffa75b6c492

.exe 1.0MB

jaffacakes118_Trojan.Win32.Chapak.bezm.ef82ab2e94d6b77d9adfdffa75b6c492

IMPHASH b5c9e8eff99978a8b574b0f447dc2dc2
SHA256 d97067e47d7db8dd18fa801f4fe71e9d94a5a3a683499557f149d42baa770e90
MD5 ef82ab2e94d6b77d9adfdffa75b6c492
SHA1 5f54feb5c1dd7eaeea03d76128d045e8bbf4261c
SHA512 18f7ec0a4a0a6cb2133139840c788230d3f16e81b0c085347ad5a6c478df3c05457be01c8f64c2436ca0ffa6835e16bf3f4d062a3333f8d2cc8033fc0ffe2627
SSDEEP 24576:2b1sGPHNZuP/BBrhORfqh9R1wfgtcIrZH6p18GaZyPa:2ZcP/BeRfqh90fgBdHAW2Pa
TLSH
T19D25D01075A2E03BD9B340B5CDBC966D512CAA300F7249EFA3C82A1E5F759D19B31A37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

252788

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW FreeConsole GetModuleHandleA GetProcAddress CreateFileW WideCharToMultiByte GetLastError EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo CloseHandle SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree HeapAlloc GetFileType GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile ReadConsoleW SetFilePointerEx HeapReAlloc GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing