jaffacakes118_Trojan[.]Win32[.]Chifrax[.]d[.]0bc5c095035930b1e876f7aacbe348e6

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Chifrax.d.0bc5c095035930b1e876f7aacbe348e6
Size 1.3MB
Sample261018-2cfcvsbt6s
SHA256 8e7dd0f3c8fc0cd3d5a50398ad75fdc0429abc5700e0a693f8ce9f75aabcdd09
MD5 0bc5c095035930b1e876f7aacbe348e6
SHA1 d26897da0c6b8f3adb4f37767a6e9986154a64e0
SHA512 0a2e446f0c645529192c0c50f4fc18797439a2290d95d5a5c9ad2651b3c5a701384929e6eca077ca3434b4ada95ca353da4770d88e7b0f6b5317ef22543654c4
SSDEEP 24576:QhA7PzrcXlCSkW13WuWzUzttiRLSeSaB9ZeNBXLCdioU6za6athzp/JY:0A7PzQlCJQ3PWzytiRd5ZeNIxNzDspp/
TLSH
T13E552320D6A1896DF4F227305BD663290569F824C768EBDEDB8EB4C72C26BC34538717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Chifrax.d.0bc5c095035930b1e876f7aacbe348e6

File Explorer

jaffacakes118_Trojan.Win32.Chifrax.d.0bc5c095035930b1e876f7aacbe348e6

.exe 1.3MB

jaffacakes118_Trojan.Win32.Chifrax.d.0bc5c095035930b1e876f7aacbe348e6

IMPHASH 0ebb3c09b06b1666d307952e824c8697
SHA256 8e7dd0f3c8fc0cd3d5a50398ad75fdc0429abc5700e0a693f8ce9f75aabcdd09
MD5 0bc5c095035930b1e876f7aacbe348e6
SHA1 d26897da0c6b8f3adb4f37767a6e9986154a64e0
SHA512 0a2e446f0c645529192c0c50f4fc18797439a2290d95d5a5c9ad2651b3c5a701384929e6eca077ca3434b4ada95ca353da4770d88e7b0f6b5317ef22543654c4
SSDEEP 24576:QhA7PzrcXlCSkW13WuWzUzttiRLSeSaB9ZeNBXLCdioU6za6athzp/JY:0A7PzQlCJQ3PWzytiRd5ZeNIxNzDspp/
TLSH
T13E552320D6A1896DF4F227305BD663290569F824C768EBDEDB8EB4C72C26BC34538717
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25692

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

wextract.pdb

advapi32

FreeSid AllocateAndInitializeSid EqualSid GetTokenInformation OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA RegCloseKey RegDeleteValueA RegOpenKeyExA RegSetValueExA RegQueryValueExA RegCreateKeyExA RegQueryInfoKeyA

kernel32

LocalFree LocalAlloc GetLastError GetCurrentProcess lstrlenA GetModuleFileNameA GetSystemDirectoryA _lclose _llseek _lopen WritePrivateProfileStringA GetWindowsDirectoryA CreateDirectoryA GetFileAttributesA ExpandEnvironmentStringsA lstrcpyA GlobalFree GlobalUnlock GlobalLock GlobalAlloc IsDBCSLeadByte GetShortPathNameA GetPrivateProfileStringA GetPrivateProfileIntA lstrcmpiA RemoveDirectoryA FindClose FindNextFileA DeleteFileA SetFileAttributesA lstrcmpA FindFirstFileA FreeResource GetProcAddress LoadResource SizeofResource FindResourceA lstrcatA CloseHandle WriteFile SetFilePointer SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime SetCurrentDirectoryA GetTempFileNameA ExitProcess CreateFileA LoadLibraryExA lstrcpynA GetVolumeInformationA FormatMessageA GetCurrentDirectoryA GetVersionExA GetExitCodeProcess WaitForSingleObject CreateProcessA GetTempPathA GetSystemInfo CreateMutexA SetEvent CreateEventA CreateThread ResetEvent TerminateThread GetDriveTypeA GetModuleHandleA GetStartupInfoA GetCommandLineA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter ReadFile LoadLibraryA GetDiskFreeSpaceA MulDiv EnumResourceLanguagesA FreeLibrary LockResource

gdi32

GetDeviceCaps

user32

ExitWindowsEx wsprintfA CharNextA CharUpperA CharPrevA SetWindowLongA GetWindowLongA CallWindowProcA DispatchMessageA MsgWaitForMultipleObjects PeekMessageA SendMessageA SetWindowPos ReleaseDC GetDC GetWindowRect SendDlgItemMessageA GetDlgItem SetForegroundWindow SetWindowTextA MessageBoxA DialogBoxIndirectParamA ShowWindow EnableWindow GetDlgItemTextA EndDialog GetDesktopWindow MessageBeep SetDlgItemTextA LoadStringA GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA