jaffacakes118_Trojan-Spy[.]Win32[.]Wolfmp[.]345df36c1be4e7701342508cd025766d

General

Target
jaffacakes118_Trojan-Spy.Win32.Wolfmp.345df36c1be4e7701342508cd025766d
Size 40KB
Sample261018-3efbbatz6j
SHA256 2a8957c366e02ff3e6106a548739ce85cb55d3b420ed764630bf23d244cbff9f
MD5 345df36c1be4e7701342508cd025766d
SHA1 76a8cba61c23ffee18edac378df558ece19fd89a
SHA512 432ecbfb74d6dd594ab0b86d3bfece1f80fe81fea5cc1965f3a7983dad7f0632df1bbdb592de85cf2c49518def2ffeef2805d44d4800b0fde5d8ef20779308dd
SSDEEP 768:D+0C9lOON+y0J4cfO3VRvoNbNG9v19oKZk:D+kJVfO3VRv9loKZ
TLSH
T10F036D26EDE0C036C4D2907111B7CF395E3ABD12C2A115939F687D6E2F329D0A93E35A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Spy.Win32.Wolfmp.345df36c1be4e7701342508cd025766d

File Explorer

jaffacakes118_Trojan-Spy.Win32.Wolfmp.345df36c1be4e7701342508cd025766d

.exe 40KB

jaffacakes118_Trojan-Spy.Win32.Wolfmp.345df36c1be4e7701342508cd025766d

IMPHASH 9a843c2149b4350dec5a028cb0874b12
SHA256 2a8957c366e02ff3e6106a548739ce85cb55d3b420ed764630bf23d244cbff9f
MD5 345df36c1be4e7701342508cd025766d
SHA1 76a8cba61c23ffee18edac378df558ece19fd89a
SHA512 432ecbfb74d6dd594ab0b86d3bfece1f80fe81fea5cc1965f3a7983dad7f0632df1bbdb592de85cf2c49518def2ffeef2805d44d4800b0fde5d8ef20779308dd
SSDEEP 768:D+0C9lOON+y0J4cfO3VRvoNbNG9v19oKZk:D+kJVfO3VRv9loKZ
TLSH
T10F036D26EDE0C036C4D2907111B7CF395E3ABD12C2A115939F687D6E2F329D0A93E35A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6968

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError lstrcpyA LoadLibraryA LCMapStringA SetEndOfFile ReadFile GetStringTypeW GetStringTypeA GetProcAddress GetOEMCP GetACP GetCPInfo CreateFileA MultiByteToWideChar FlushFileBuffers SetStdHandle SetFilePointer HeapReAlloc VirtualAlloc WriteFile RtlUnwind VirtualFree HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA UnhandledExceptionFilter GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess HeapAlloc HeapFree CloseHandle TerminateProcess GetCurrentProcess LCMapStringW

user32

GetMessageA SendMessageA LoadIconA GetWindowLongA DispatchMessageA ShowWindow CreateDialogParamA PostQuitMessage DestroyWindow TranslateMessage MessageBoxA UpdateWindow SetDlgItemTextA GetDlgItemTextA PostMessageA

shell32

SHBrowseForFolderA SHGetPathFromIDListA

wsock32

WSACleanup closesocket send recv connect htons getservbyname socket gethostbyname WSAStartup inet_addr gethostname

Sharing