jaffacakes118_Trojan[.]Win32[.]Inject[.]ldmh[.]fb59bdce740ae1a216e2abd0c6fd9725

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Inject.ldmh.fb59bdce740ae1a216e2abd0c6fd9725
Size 5.0MB
Sample261018-vkctdagx21
SHA256 6589e6ecc3c2b1d7d97183f2e0e3af336a36b8ee9c76892b4793c1fee2405cc4
MD5 fb59bdce740ae1a216e2abd0c6fd9725
SHA1 080a0a5157db1ec0c73f6776411d9405b11d19c6
SHA512 dc86eeab58366de8081f6d49e696076f35076bacdd6d356ccbb18cce09b25a53f01b5fac54e04998a7b3013ee3a3d25936be68fe5b608c3db03e1a07d22d6775
SSDEEP 98304:JilUhOtek8YiLDyOocsY9ZLFvKwZE3lACOl4xqq6+w4OE:JSRekLihLgwZmlOVa3
TLSH
T1CB363350F04B8BFBD4631A30551406A0527CEBFEFBE12B66171A4B5D08F85CAED889E7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Inject.ldmh.fb59bdce740ae1a216e2abd0c6fd9725

File Explorer

jaffacakes118_Trojan.Win32.Inject.ldmh.fb59bdce740ae1a216e2abd0c6fd9725

.exe 5.0MB

jaffacakes118_Trojan.Win32.Inject.ldmh.fb59bdce740ae1a216e2abd0c6fd9725

IMPHASH bc5ce990cf54f8d435a68eb97512f73e
SHA256 6589e6ecc3c2b1d7d97183f2e0e3af336a36b8ee9c76892b4793c1fee2405cc4
MD5 fb59bdce740ae1a216e2abd0c6fd9725
SHA1 080a0a5157db1ec0c73f6776411d9405b11d19c6
SHA512 dc86eeab58366de8081f6d49e696076f35076bacdd6d356ccbb18cce09b25a53f01b5fac54e04998a7b3013ee3a3d25936be68fe5b608c3db03e1a07d22d6775
SSDEEP 98304:JilUhOtek8YiLDyOocsY9ZLFvKwZE3lACOl4xqq6+w4OE:JSRekLihLgwZmlOVa3
TLSH
T1CB363350F04B8BFBD4631A30551406A0527CEBFEFBE12B66171A4B5D08F85CAED889E7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA SetFileSecurityA SetFileSecurityW

kernel32

CloseHandle CompareStringA CreateDirectoryA CreateDirectoryW CreateFileA CreateFileW DeleteFileA DeleteFileW DosDateTimeToFileTime ExitProcess ExpandEnvironmentStringsA FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindResourceA FreeLibrary GetCPInfo GetCommandLineA GetCurrentDirectoryA GetCurrentProcess GetDateFormatA GetFileAttributesA GetFileAttributesW GetFileType GetFullPathNameA GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetNumberFormatA GetProcAddress GetProcessHeap GetStdHandle GetTempPathA GetTickCount GetTimeFormatA GetVersionExA GlobalAlloc HeapAlloc HeapFree HeapReAlloc IsDBCSLeadByte LoadLibraryA LocalFileTimeToFileTime MoveFileA MoveFileExA MultiByteToWideChar ReadFile SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetFileAttributesA SetFileAttributesW SetFilePointer SetFileTime SetLastError Sleep SystemTimeToFileTime WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpiA lstrlenA

comctl32

ord17

comdlg32

CommDlgExtendedError GetOpenFileNameA GetSaveFileNameA

gdi32

DeleteObject

shell32

SHBrowseForFolderA SHChangeNotify SHFileOperationA SHGetFileInfoA SHGetMalloc SHGetSpecialFolderLocation ShellExecuteExA SHGetPathFromIDListA

user32

CharToOemA CharToOemBuffA CharUpperA CopyRect CreateWindowExA DefWindowProcA DestroyIcon DestroyWindow DialogBoxParamA DispatchMessageA EnableWindow EndDialog FindWindowExA GetClassNameA GetClientRect GetDlgItem GetDlgItemTextA GetMessageA GetParent GetSysColor GetSystemMetrics GetWindow GetWindowLongA GetWindowRect GetWindowTextA IsWindow IsWindowVisible LoadBitmapA LoadCursorA LoadIconA LoadStringA MapWindowPoints MessageBoxA OemToCharA OemToCharBuffA PeekMessageA PostMessageA RegisterClassExA SendDlgItemMessageA SendMessageA SetDlgItemTextA SetFocus SetMenu SetWindowLongA SetWindowPos SetWindowTextA ShowWindow TranslateMessage UpdateWindow WaitForInputIdle wsprintfA wvsprintfA

ole32

CLSIDFromString CoCreateInstance CreateStreamOnHGlobal OleInitialize OleUninitialize