jaffacakes118_Trojan[.]Win32[.]Genome[.]ykle[.]ec5d0f4a48011fccdb68a82b06673650

General

Target
jaffacakes118_Trojan.Win32.Genome.ykle.ec5d0f4a48011fccdb68a82b06673650
Size 194KB
Sample261018-v2aeksgy5w
SHA256 08414106f8a06be2b9879909729ffb9cee1579ce6b205650782aa761d11addba
MD5 ec5d0f4a48011fccdb68a82b06673650
SHA1 b09f482fc77bafbce9e59b1802a500e270766449
SHA512 bb646264a033542cc94b105d0bb150b0583201acb72a3002d4cc9f831060885e56f1b8870696b528d9e1e94a4589322c41b60356cabc880f7a11c53307f2d209
SSDEEP 3072:UWcGF8X5CUp7JkRYuH6DfeZA+NMaiTBfRz+Tsl4EZ5trR:sGOCUUauaDfe5MaiTBJ8sl4EZN
TLSH
T1D0148D217181C077D27B073884DAC7755A7E38704769C68BBBD88FA95F24392EB352CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Genome.ykle.ec5d0f4a48011fccdb68a82b06673650

File Explorer

jaffacakes118_Trojan.Win32.Genome.ykle.ec5d0f4a48011fccdb68a82b06673650

.dll 194KB

jaffacakes118_Trojan.Win32.Genome.ykle.ec5d0f4a48011fccdb68a82b06673650

IMPHASH 1330501f48576e74998b36f217129cc7
SHA256 08414106f8a06be2b9879909729ffb9cee1579ce6b205650782aa761d11addba
MD5 ec5d0f4a48011fccdb68a82b06673650
SHA1 b09f482fc77bafbce9e59b1802a500e270766449
SHA512 bb646264a033542cc94b105d0bb150b0583201acb72a3002d4cc9f831060885e56f1b8870696b528d9e1e94a4589322c41b60356cabc880f7a11c53307f2d209
SSDEEP 3072:UWcGF8X5CUp7JkRYuH6DfeZA+NMaiTBfRz+Tsl4EZ5trR:sGOCUUauaDfe5MaiTBJ8sl4EZN
TLSH
T1D0148D217181C077D27B073884DAC7755A7E38704769C68BBBD88FA95F24392EB352CA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

69165

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

StrNCatA StrToIntA StrCmpNIA wnsprintfA StrRChrA StrStrA StrStrIA

kernel32

OpenMutexA CloseHandle GetProcAddress GetLastError SetEvent WaitForSingleObject lstrcmpiA CreateFileMappingA MapViewOfFile ResetEvent Sleep GetComputerNameA GetVolumeInformationA GetTickCount HeapFree CreateThread TerminateThread CreateMutexA ReleaseMutex GetModuleHandleA HeapAlloc LocalFree GetCurrentProcess CreateEventA GetConsoleMode GetConsoleCP SetFilePointer lstrcpynA GetProcessHeap LoadLibraryA FreeLibrary lstrlenA InitializeCriticalSectionAndSpinCount GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA FlushFileBuffers GetCurrentProcessId DeleteCriticalSection InterlockedIncrement InterlockedDecrement InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapCreate HeapDestroy VirtualFree VirtualAlloc HeapReAlloc GetACP GetOEMCP IsValidCodePage HeapSize ExitProcess GetStringTypeA GetStringTypeW SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter WriteFile GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale

advapi32

SetNamedSecurityInfoA GetSecurityDescriptorSacl ConvertStringSecurityDescriptorToSecurityDescriptorW RegSetValueExA RegCreateKeyExA RegCloseKey RegQueryValueExA RegCreateKeyA

Sharing