jaffacakes118_Trojan[.]Win32[.]Chifrax[.]cmb[.]12a7c7e8f53760714bb5c131b86287db

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Chifrax.cmb.12a7c7e8f53760714bb5c131b86287db
Size 444KB
Sample261018-2bzecach45
SHA256 34f8260c7b551cf2585598f584b506c6ceddd62871ba25dad552f202706af385
MD5 12a7c7e8f53760714bb5c131b86287db
SHA1 e33246d88aec8eb1beabf0222606093f9671e628
SHA512 25f0d267a99dca2e471748c1a49d0a215355bb9125c722a536636a298628645165ef76e80516a9dc8ba4d868bffde25dfe9e62cb269459c42bf84ab4a8693f79
SSDEEP 12288:KoviChgoFShZ4HY91hqas305XVLwW15ZMgQv5aN+1SeHy4/CV:KoviLoF8ZC2qa7lEWdMfv5u+1jHy4G
TLSH
T16FA4021277D1147DE92272315E7B2BA392B9FE346A79AB43FB601A2D3E30543D522313
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Chifrax.cmb.12a7c7e8f53760714bb5c131b86287db

File Explorer

jaffacakes118_Trojan.Win32.Chifrax.cmb.12a7c7e8f53760714bb5c131b86287db

.exe 444KB

jaffacakes118_Trojan.Win32.Chifrax.cmb.12a7c7e8f53760714bb5c131b86287db

IMPHASH dbb1eb5c3476069287a73206929932fd
SHA256 34f8260c7b551cf2585598f584b506c6ceddd62871ba25dad552f202706af385
MD5 12a7c7e8f53760714bb5c131b86287db
SHA1 e33246d88aec8eb1beabf0222606093f9671e628
SHA512 25f0d267a99dca2e471748c1a49d0a215355bb9125c722a536636a298628645165ef76e80516a9dc8ba4d868bffde25dfe9e62cb269459c42bf84ab4a8693f79
SSDEEP 12288:KoviChgoFShZ4HY91hqas305XVLwW15ZMgQv5aN+1SeHy4/CV:KoviLoF8ZC2qa7lEWdMfv5u+1jHy4G
TLSH
T16FA4021277D1147DE92272315E7B2BA392B9FE346A79AB43FB601A2D3E30543D522313
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

46256

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

comctl32

InitCommonControlsEx ord17

shlwapi

SHAutoComplete

kernel32

DeleteFileW DeleteFileA CreateDirectoryA CreateDirectoryW FindClose FindNextFileA FindFirstFileA FindNextFileW FindFirstFileW GetTickCount WideCharToMultiByte GlobalAlloc GetVersionExW GetFullPathNameA GetFullPathNameW GetModuleFileNameW FindResourceW GetModuleHandleW HeapAlloc GetProcessHeap HeapFree HeapReAlloc CompareStringA ExitProcess GetLocaleInfoW GetNumberFormatW SetFileAttributesW GetDateFormatW GetTimeFormatW FileTimeToSystemTime FileTimeToLocalFileTime ExpandEnvironmentStringsW WaitForSingleObject Sleep GetTempPathW MoveFileExW UnmapViewOfFile GetCommandLineW MapViewOfFile CreateFileMappingW OpenFileMappingW SetEnvironmentVariableW GetProcAddress LocalFileTimeToFileTime SystemTimeToFileTime GetSystemTime MultiByteToWideChar CompareStringW IsDBCSLeadByte GetCPInfo SetCurrentDirectoryW LoadLibraryW FreeLibrary SetFileAttributesA GetFileAttributesW GetFileAttributesA WriteFile GetStdHandle ReadFile GetCurrentDirectoryW CreateFileW CreateFileA GetFileType SetEndOfFile SetFilePointer MoveFileW SetFileTime GetCurrentProcess CloseHandle SetLastError GetLastError DosDateTimeToFileTime

user32

wvsprintfW ReleaseDC GetDC SendMessageW SetDlgItemTextW SetFocus EndDialog DestroyIcon SendDlgItemMessageW GetDlgItemTextW GetClassNameW DialogBoxParamW IsWindowVisible WaitForInputIdle SetForegroundWindow GetSysColor PostMessageW LoadBitmapW LoadIconW CharToOemA OemToCharA FindWindowExW wvsprintfA GetParent MapWindowPoints CreateWindowExW UpdateWindow SetWindowTextW LoadCursorW RegisterClassExW SetWindowLongW GetWindowLongW DefWindowProcW PeekMessageW GetMessageW TranslateMessage DispatchMessageW DestroyWindow GetClientRect IsWindow CharToOemBuffW MessageBoxW ShowWindow GetDlgItem EnableWindow OemToCharBuffA CharUpperA CharToOemBuffA LoadStringW SetWindowPos GetWindowTextW GetSystemMetrics GetWindow CharUpperW GetWindowRect CopyRect

gdi32

GetDeviceCaps GetObjectW CreateCompatibleBitmap SelectObject StretchBlt CreateCompatibleDC DeleteObject DeleteDC

comdlg32

GetOpenFileNameW CommDlgExtendedError GetSaveFileNameW

advapi32

RegOpenKeyExW LookupPrivilegeValueW OpenProcessToken RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey SetFileSecurityW SetFileSecurityA AdjustTokenPrivileges

shell32

SHChangeNotify ShellExecuteExW SHFileOperationW SHGetFileInfoW SHGetSpecialFolderLocation SHGetMalloc SHBrowseForFolderW SHGetPathFromIDListW

ole32

CreateStreamOnHGlobal OleInitialize CoCreateInstance OleUninitialize CLSIDFromString

oleaut32

VariantInit