jaffacakes118_Trojan[.]Win32[.]Inject[.]ggz[.]5061dec2554a7d503ee5976005408937

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Inject.ggz.5061dec2554a7d503ee5976005408937
Size 132KB
Sample261018-t415msgv81
SHA256 f16eea0c66a7d44ccba8e4bf95bb4c38fa2149146426ba9d78031397a6b8e355
MD5 5061dec2554a7d503ee5976005408937
SHA1 e45da958a34f6d1dbc2ef64fb0b2e8d78f68c29b
SHA512 1c119a23ad7fd44ab0450c88d7402e879e203e89addde91bc705a749977deffee5c544d513de1ca5ba6460c6a8044d04a7b75a9c35afdaf9c4c739c491bdac0f
SSDEEP 3072:DD6H+y20JlLgjfNQ4bcjTwT994Th6rC2dY2heTwti2gZ:DDn0JQfNQ4bc3wT994Th6rC2duT/n
TLSH
T130D3A3013CA6C471F9975238C547C4B7223A689B78A68E3B5FDD093E0B520BC965F7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Inject.ggz.5061dec2554a7d503ee5976005408937

File Explorer

jaffacakes118_Trojan.Win32.Inject.ggz.5061dec2554a7d503ee5976005408937

.exe 132KB

jaffacakes118_Trojan.Win32.Inject.ggz.5061dec2554a7d503ee5976005408937

IMPHASH e924032140d1b95edc0d37cd8da606ef
SHA256 f16eea0c66a7d44ccba8e4bf95bb4c38fa2149146426ba9d78031397a6b8e355
MD5 5061dec2554a7d503ee5976005408937
SHA1 e45da958a34f6d1dbc2ef64fb0b2e8d78f68c29b
SHA512 1c119a23ad7fd44ab0450c88d7402e879e203e89addde91bc705a749977deffee5c544d513de1ca5ba6460c6a8044d04a7b75a9c35afdaf9c4c739c491bdac0f
SSDEEP 3072:DD6H+y20JlLgjfNQ4bcjTwT994Th6rC2dY2heTwti2gZ:DDn0JQfNQ4bc3wT994Th6rC2duT/n
TLSH
T130D3A3013CA6C471F9975238C547C4B7223A689B78A68E3B5FDD093E0B520BC965F7B2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16370

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

mpr

WNetEnumResourceW WNetCloseEnum WNetOpenEnumW

netapi32

NetShareAdd

kernel32

CreateFileW WriteFile WideCharToMultiByte Sleep GetTickCount FindFirstFileA GetSystemTime CopyFileA CreateDirectoryW SetCurrentDirectoryW GetDriveTypeA MultiByteToWideChar LockFile GetFileSize FindFirstFileW GetCurrentDirectoryW FindNextFileW FindClose GlobalAlloc GlobalFree SetCurrentDirectoryA SetProcessShutdownParameters GetCommandLineA GetFileAttributesExW WriteConsoleA SetStdHandle GetLocaleInfoA CloseHandle WaitForSingleObject CreateMutexW SetFileAttributesW CopyFileW GetCommandLineW GetEnvironmentVariableW ReleaseMutex CreateThread GetConsoleOutputCP WriteConsoleW CreateFileA MoveFileW TerminateProcess GetStringTypeW GetStringTypeA RtlUnwind InitializeCriticalSection HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW FlushFileBuffers GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetLastError GetProcAddress GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement ExitProcess DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize VirtualAlloc HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode CompareStringA CompareStringW SetEnvironmentVariableA LoadLibraryA

user32

GetDC SystemParametersInfoW MessageBoxW FindWindowW DrawTextW

gdi32

DeleteObject SetTextColor SetBkColor SelectObject CreateFontW DeleteDC

advapi32

RegSetValueExW RegQueryValueExW RegQueryValueExA RegCloseKey RegSetValueExA RegCreateKeyExA RegOpenKeyExA RegDeleteValueA

shell32

ShellExecuteW CommandLineToArgvW

ole32

CoCreateInstance CoUninitialize CoInitialize