jaffacakes118_Trojan[.]Win32[.]Inject[.]gdeo[.]602046016396218b8fe81911a15167fb

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Inject.gdeo.602046016396218b8fe81911a15167fb
Size 215KB
Sample261018-t4ftpsez5p
SHA256 8bc467373d1db064aa36ea6c4a508d17490a39b4ec12478201894c521f7837e8
MD5 602046016396218b8fe81911a15167fb
SHA1 71b37199b8111f6bf0afcf75c9c202a96ec2060d
SHA512 7944e0844fc63b2626f95d841eaaa03bdd97d313880e9efb95e9c7582c3e229aa11ae40a1faa0e97496687c60e8d0a417c00e566dde1fc9efc49f80356dd1288
SSDEEP 6144:qFw8wzBhaEUJ45mnkP5dkkyEWApdKXgUAyy0cpWfLxp6D22o:qFszBhqS5mDkyERpdKQBpWfLxp6Dvo
TLSH
T17524F11373D164BAD20205312F9E6BCAE1BCE63554AAE50BFB921E1F3B60443C24BB53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Inject.gdeo.602046016396218b8fe81911a15167fb

File Explorer

jaffacakes118_Trojan.Win32.Inject.gdeo.602046016396218b8fe81911a15167fb

.exe 215KB

jaffacakes118_Trojan.Win32.Inject.gdeo.602046016396218b8fe81911a15167fb

IMPHASH dbb1eb5c3476069287a73206929932fd
SHA256 8bc467373d1db064aa36ea6c4a508d17490a39b4ec12478201894c521f7837e8
MD5 602046016396218b8fe81911a15167fb
SHA1 71b37199b8111f6bf0afcf75c9c202a96ec2060d
SHA512 7944e0844fc63b2626f95d841eaaa03bdd97d313880e9efb95e9c7582c3e229aa11ae40a1faa0e97496687c60e8d0a417c00e566dde1fc9efc49f80356dd1288
SSDEEP 6144:qFw8wzBhaEUJ45mnkP5dkkyEWApdKXgUAyy0cpWfLxp6D22o:qFszBhqS5mDkyERpdKQBpWfLxp6Dvo
TLSH
T17524F11373D164BAD20205312F9E6BCAE1BCE63554AAE50BFB921E1F3B60443C24BB53
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

46261

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

comctl32

InitCommonControlsEx ord17

shlwapi

SHAutoComplete

kernel32

DeleteFileW DeleteFileA CreateDirectoryA CreateDirectoryW FindClose FindNextFileA FindFirstFileA FindNextFileW FindFirstFileW GetTickCount WideCharToMultiByte GlobalAlloc GetVersionExW GetFullPathNameA GetFullPathNameW GetModuleFileNameW FindResourceW GetModuleHandleW HeapAlloc GetProcessHeap HeapFree HeapReAlloc CompareStringA ExitProcess GetLocaleInfoW GetNumberFormatW SetFileAttributesW GetDateFormatW GetTimeFormatW FileTimeToSystemTime FileTimeToLocalFileTime ExpandEnvironmentStringsW WaitForSingleObject Sleep GetTempPathW MoveFileExW UnmapViewOfFile GetCommandLineW MapViewOfFile CreateFileMappingW OpenFileMappingW SetEnvironmentVariableW GetProcAddress LocalFileTimeToFileTime SystemTimeToFileTime GetSystemTime MultiByteToWideChar CompareStringW IsDBCSLeadByte GetCPInfo SetCurrentDirectoryW LoadLibraryW FreeLibrary SetFileAttributesA GetFileAttributesW GetFileAttributesA WriteFile GetStdHandle ReadFile GetCurrentDirectoryW CreateFileW CreateFileA GetFileType SetEndOfFile SetFilePointer MoveFileW SetFileTime GetCurrentProcess CloseHandle SetLastError GetLastError DosDateTimeToFileTime

user32

wvsprintfW ReleaseDC GetDC SendMessageW SetDlgItemTextW SetFocus EndDialog DestroyIcon SendDlgItemMessageW GetDlgItemTextW GetClassNameW DialogBoxParamW IsWindowVisible WaitForInputIdle SetForegroundWindow GetSysColor PostMessageW LoadBitmapW LoadIconW CharToOemA OemToCharA FindWindowExW wvsprintfA GetParent MapWindowPoints CreateWindowExW UpdateWindow SetWindowTextW LoadCursorW RegisterClassExW SetWindowLongW GetWindowLongW DefWindowProcW PeekMessageW GetMessageW TranslateMessage DispatchMessageW DestroyWindow GetClientRect IsWindow CharToOemBuffW MessageBoxW ShowWindow GetDlgItem EnableWindow OemToCharBuffA CharUpperA CharToOemBuffA LoadStringW SetWindowPos GetWindowTextW GetSystemMetrics GetWindow CharUpperW GetWindowRect CopyRect

gdi32

GetDeviceCaps GetObjectW CreateCompatibleBitmap SelectObject StretchBlt CreateCompatibleDC DeleteObject DeleteDC

comdlg32

GetOpenFileNameW CommDlgExtendedError GetSaveFileNameW

advapi32

RegOpenKeyExW LookupPrivilegeValueW OpenProcessToken RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey SetFileSecurityW SetFileSecurityA AdjustTokenPrivileges

shell32

SHChangeNotify ShellExecuteExW SHFileOperationW SHGetFileInfoW SHGetSpecialFolderLocation SHGetMalloc SHBrowseForFolderW SHGetPathFromIDListW

ole32

CreateStreamOnHGlobal OleInitialize CoCreateInstance OleUninitialize CLSIDFromString

oleaut32

VariantInit