jaffacakes118_Trojan[.]Win32[.]Chifrax[.]cmb[.]3f0656b48e027707516876368d345ba6

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Chifrax.cmb.3f0656b48e027707516876368d345ba6
Size 265KB
Sample261018-2b18yahz2j
SHA256 352cb724a0c2efef4758957d4c68809f0733de4a1a430c4c4b3b0efbbc6aa168
MD5 3f0656b48e027707516876368d345ba6
SHA1 435dd27d06c80e0e4d38dcfc1f7d8f682eb3cbd8
SHA512 57046e84f76a59f0fb1fa88a988646df83fdb579bff1bcf29af4ddd9119e5eaf85339fca38a8c7634aaf21b1e4a2c4fd93bb5cafc5f58e0bc1e9020672372434
SSDEEP 6144:FcWMJJhqryYP/daqtl2G/447KQBmJm6yGjmLgIc20/T:FczJJhqrVPl2MNB29frIc2iT
TLSH
T12844013737D640BAEC52E2302E7D272AE1BEFA309536950AF7500A0C7A71B918567F53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Chifrax.cmb.3f0656b48e027707516876368d345ba6

File Explorer

jaffacakes118_Trojan.Win32.Chifrax.cmb.3f0656b48e027707516876368d345ba6

.exe 265KB

jaffacakes118_Trojan.Win32.Chifrax.cmb.3f0656b48e027707516876368d345ba6

IMPHASH 9402b48d966c911f0785b076b349b5ef
SHA256 352cb724a0c2efef4758957d4c68809f0733de4a1a430c4c4b3b0efbbc6aa168
MD5 3f0656b48e027707516876368d345ba6
SHA1 435dd27d06c80e0e4d38dcfc1f7d8f682eb3cbd8
SHA512 57046e84f76a59f0fb1fa88a988646df83fdb579bff1bcf29af4ddd9119e5eaf85339fca38a8c7634aaf21b1e4a2c4fd93bb5cafc5f58e0bc1e9020672372434
SSDEEP 6144:FcWMJJhqryYP/daqtl2G/447KQBmJm6yGjmLgIc20/T:FczJJhqrVPl2MNB29frIc2iT
TLSH
T12844013737D640BAEC52E2302E7D272AE1BEFA309536950AF7500A0C7A71B918567F53
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42885

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

comctl32

ord17

kernel32

DeleteFileA DeleteFileW CreateDirectoryA CreateDirectoryW FindClose FindNextFileA FindFirstFileA FindNextFileW FindFirstFileW GetTickCount WideCharToMultiByte MultiByteToWideChar GetVersionExA GlobalAlloc lstrlenA GetModuleFileNameA FindResourceA GetModuleHandleA HeapAlloc GetProcessHeap HeapFree HeapReAlloc CompareStringA ExitProcess GetLocaleInfoA GetNumberFormatA lstrcmpiA GetProcAddress GetDateFormatA GetTimeFormatA FileTimeToSystemTime FileTimeToLocalFileTime ExpandEnvironmentStringsA WaitForSingleObject SetCurrentDirectoryA Sleep GetTempPathA MoveFileExA UnmapViewOfFile GetCommandLineA MapViewOfFile CreateFileMappingA GetModuleFileNameW SetEnvironmentVariableA OpenFileMappingA LocalFileTimeToFileTime SystemTimeToFileTime GetSystemTime IsDBCSLeadByte GetCPInfo FreeLibrary LoadLibraryA GetCurrentDirectoryA GetFullPathNameA SetFileAttributesW SetFileAttributesA GetFileAttributesW GetFileAttributesA WriteFile SetLastError GetStdHandle ReadFile CreateFileW CreateFileA GetFileType SetEndOfFile SetFilePointer MoveFileA SetFileTime GetCurrentProcess CloseHandle GetLastError DosDateTimeToFileTime

user32

ReleaseDC GetDC SendMessageA wsprintfA SetDlgItemTextA EndDialog DestroyIcon SendDlgItemMessageA GetDlgItemTextA DialogBoxParamA IsWindowVisible WaitForInputIdle GetSysColor PostMessageA SetMenu SetFocus LoadBitmapA LoadIconA CharToOemA OemToCharA GetClassNameA CharUpperA GetWindowRect GetParent MapWindowPoints CreateWindowExA UpdateWindow SetWindowTextA LoadCursorA RegisterClassExA SetWindowLongA GetWindowLongA DefWindowProcA PeekMessageA GetMessageA TranslateMessage DispatchMessageA GetClientRect CopyRect IsWindow MessageBoxA ShowWindow GetDlgItem EnableWindow FindWindowExA wvsprintfA CharToOemBuffA LoadStringA SetWindowPos GetWindowTextA GetWindow GetSystemMetrics OemToCharBuffA DestroyWindow

gdi32

GetDeviceCaps GetObjectA CreateCompatibleBitmap SelectObject StretchBlt CreateCompatibleDC DeleteObject DeleteDC

comdlg32

GetSaveFileNameA CommDlgExtendedError GetOpenFileNameA

advapi32

LookupPrivilegeValueA RegOpenKeyExA RegQueryValueExA RegCreateKeyExA RegSetValueExA RegCloseKey SetFileSecurityW SetFileSecurityA OpenProcessToken AdjustTokenPrivileges

shell32

ShellExecuteExA SHFileOperationA SHGetFileInfoA SHGetSpecialFolderLocation SHGetMalloc SHBrowseForFolderA SHGetPathFromIDListA SHChangeNotify

ole32

CreateStreamOnHGlobal OleInitialize CoCreateInstance OleUninitialize CLSIDFromString

oleaut32

VariantInit