jaffacakes118_Trojan[.]Win32[.]Inject[.]ldxd[.]c1d91a5c46c7b1a1e8e26e6fcdbe3fdf

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Inject.ldxd.c1d91a5c46c7b1a1e8e26e6fcdbe3fdf
Size 5.1MB
Sample261018-vmkxrsstcs
SHA256 e25079698c9c77a6c98cc6d63569ec207f3f11e750eff41dbb6715263ffe58ae
MD5 c1d91a5c46c7b1a1e8e26e6fcdbe3fdf
SHA1 2f9622c870a78e2c47c44185c11e1a81adab06f0
SHA512 48b93887420b87cb120e474a49a3d81aeb1639342038b143c46a2eb5b5c6e5113fe34789248cd31b92f42f4adea3956679c9d1670daf2f0c85266d0ccae7f103
SSDEEP 98304:Oe6f9x24SDaR7R0st7tmiFcNh7ZopCiOKJlHo3Yrr6RItt5r/bbOUNaXbJgbcOl:SFk4SDaR7R0stZmzNhyDJZo3YX2Wt5rF
TLSH
T1653633CCF395C420C89615B62D09F37925BFAF3A7330A9828B9F6C630D526D6541CAE3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Inject.ldxd.c1d91a5c46c7b1a1e8e26e6fcdbe3fdf

File Explorer

jaffacakes118_Trojan.Win32.Inject.ldxd.c1d91a5c46c7b1a1e8e26e6fcdbe3fdf

.exe 5.1MB

jaffacakes118_Trojan.Win32.Inject.ldxd.c1d91a5c46c7b1a1e8e26e6fcdbe3fdf

IMPHASH bc5ce990cf54f8d435a68eb97512f73e
SHA256 e25079698c9c77a6c98cc6d63569ec207f3f11e750eff41dbb6715263ffe58ae
MD5 c1d91a5c46c7b1a1e8e26e6fcdbe3fdf
SHA1 2f9622c870a78e2c47c44185c11e1a81adab06f0
SHA512 48b93887420b87cb120e474a49a3d81aeb1639342038b143c46a2eb5b5c6e5113fe34789248cd31b92f42f4adea3956679c9d1670daf2f0c85266d0ccae7f103
SSDEEP 98304:Oe6f9x24SDaR7R0st7tmiFcNh7ZopCiOKJlHo3Yrr6RItt5r/bbOUNaXbJgbcOl:SFk4SDaR7R0stZmzNhyDJZo3YX2Wt5rF
TLSH
T1653633CCF395C420C89615B62D09F37925BFAF3A7330A9828B9F6C630D526D6541CAE3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA SetFileSecurityA SetFileSecurityW

kernel32

CloseHandle CompareStringA CreateDirectoryA CreateDirectoryW CreateFileA CreateFileW DeleteFileA DeleteFileW DosDateTimeToFileTime ExitProcess ExpandEnvironmentStringsA FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindResourceA FreeLibrary GetCPInfo GetCommandLineA GetCurrentDirectoryA GetCurrentProcess GetDateFormatA GetFileAttributesA GetFileAttributesW GetFileType GetFullPathNameA GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetNumberFormatA GetProcAddress GetProcessHeap GetStdHandle GetTempPathA GetTickCount GetTimeFormatA GetVersionExA GlobalAlloc HeapAlloc HeapFree HeapReAlloc IsDBCSLeadByte LoadLibraryA LocalFileTimeToFileTime MoveFileA MoveFileExA MultiByteToWideChar ReadFile SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetFileAttributesA SetFileAttributesW SetFilePointer SetFileTime SetLastError Sleep SystemTimeToFileTime WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpiA lstrlenA

comctl32

ord17

comdlg32

CommDlgExtendedError GetOpenFileNameA GetSaveFileNameA

gdi32

DeleteObject

shell32

SHBrowseForFolderA SHChangeNotify SHFileOperationA SHGetFileInfoA SHGetMalloc SHGetSpecialFolderLocation ShellExecuteExA SHGetPathFromIDListA

user32

CharToOemA CharToOemBuffA CharUpperA CopyRect CreateWindowExA DefWindowProcA DestroyIcon DestroyWindow DialogBoxParamA DispatchMessageA EnableWindow EndDialog FindWindowExA GetClassNameA GetClientRect GetDlgItem GetDlgItemTextA GetMessageA GetParent GetSysColor GetSystemMetrics GetWindow GetWindowLongA GetWindowRect GetWindowTextA IsWindow IsWindowVisible LoadBitmapA LoadCursorA LoadIconA LoadStringA MapWindowPoints MessageBoxA OemToCharA OemToCharBuffA PeekMessageA PostMessageA RegisterClassExA SendDlgItemMessageA SendMessageA SetDlgItemTextA SetFocus SetMenu SetWindowLongA SetWindowPos SetWindowTextA ShowWindow TranslateMessage UpdateWindow WaitForInputIdle wsprintfA wvsprintfA

ole32

CLSIDFromString CoCreateInstance CreateStreamOnHGlobal OleInitialize OleUninitialize