jaffacakes118_Trojan[.]Win32[.]Chapak[.]fta[.]6182a5dccf4ed4ea74f83926f574e48a

General

Target
jaffacakes118_Trojan.Win32.Chapak.fta.6182a5dccf4ed4ea74f83926f574e48a
Size 1.6MB
Sample261018-2bbnaabt4y
SHA256 23a4ea8bffa5634afd778e286e589ac654c074b1bdb69886baf6b92112563f0b
MD5 6182a5dccf4ed4ea74f83926f574e48a
SHA1 64a0094ee3df9ace33722a3f8b5870c74c4be0c3
SHA512 195a6b61cf836cc27a91488c3213311f17e426dc6ed232a26939a662eae85ddf79ed6c270a16f1c125386d13cb9dd1887031a65c018165a4a6df8c720a3704aa
SSDEEP 12288:x8ALs+iOS6ECf9nMydsaklrx5F8ftu6Eu/pOB2EufkBu1PWc:xVLjvECf2yeakdx5Eu6Eu/p4ufkB0
TLSH
T1DD851202B9E1D472D0F2BD302C6BCB755A2EBEB056911C6723B0DA1E3E791D04A36D56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Chapak.fta.6182a5dccf4ed4ea74f83926f574e48a

File Explorer

jaffacakes118_Trojan.Win32.Chapak.fta.6182a5dccf4ed4ea74f83926f574e48a

.exe 1.6MB

jaffacakes118_Trojan.Win32.Chapak.fta.6182a5dccf4ed4ea74f83926f574e48a

IMPHASH 3eb1dee002f42ff51adc8e5e7f50298c
SHA256 23a4ea8bffa5634afd778e286e589ac654c074b1bdb69886baf6b92112563f0b
MD5 6182a5dccf4ed4ea74f83926f574e48a
SHA1 64a0094ee3df9ace33722a3f8b5870c74c4be0c3
SHA512 195a6b61cf836cc27a91488c3213311f17e426dc6ed232a26939a662eae85ddf79ed6c270a16f1c125386d13cb9dd1887031a65c018165a4a6df8c720a3704aa
SSDEEP 12288:x8ALs+iOS6ECf9nMydsaklrx5F8ftu6Eu/pOB2EufkBu1PWc:xVLjvECf2yeakdx5Eu6Eu/p4ufkB0
TLSH
T1DD851202B9E1D472D0F2BD302C6BCB755A2EBEB056911C6723B0DA1E3E791D04A36D56
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9588

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW VirtualProtect CreateFileW DecodePointer WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap GetStringTypeW GetFileType UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc CloseHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle RaiseException

user32

GetUpdatedClipboardFormats GetRegisteredRawInputDevices GetMenuCheckMarkDimensions DisableProcessWindowsGhosting GetWindowModuleFileNameW ImpersonateDdeClientWindow

shell32

SetCurrentProcessExplicitAppUserModelID ord170 ord709 SHLoadNonloadedIconOverlayIdentifiers Shell_GetCachedImageIndexW SHAssocEnumHandlersForProtocolByApplication

Sharing