jaffacakes118_Trojan[.]Win32[.]Homepage[.]b[.]6041cbe0fc9e5eb0cdc8183647a786b4

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Homepage.b.6041cbe0fc9e5eb0cdc8183647a786b4
Size 60KB
Sample261018-whrees1t2l
SHA256 51a5f5c4c585b5fc77fb4f41efbcf8afed9b7fadca222f27a8d99058bae66bb2
MD5 6041cbe0fc9e5eb0cdc8183647a786b4
SHA1 ea67ae2ee3ceba1719f79c5534c9cdbebde6ab76
SHA512 1144be3519808f8a4525dd81dc47590c3423683caa4fd6bddbb58b57740e5a0ff915e1c366476d2c353503b70d2cc04dc8bbb398c5b6b558336499d02b7cadf7
SSDEEP 768:PMP/r1Iu4NVwYMhYf5VJqxSjRR7zM1ckx080ffdnogh/:PUGuMyY9Qo/keF1fh/
TLSH
T17453F713AA1A3392E2529130685D6A7CC2E7E4660B509BEB0384DD6C0DF3AD1DD7B1DF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Homepage.b.6041cbe0fc9e5eb0cdc8183647a786b4

File Explorer

jaffacakes118_Trojan.Win32.Homepage.b.6041cbe0fc9e5eb0cdc8183647a786b4

.exe 60KB

jaffacakes118_Trojan.Win32.Homepage.b.6041cbe0fc9e5eb0cdc8183647a786b4

IMPHASH f72dff3a95daf78b1a9e063f8626bf8c
SHA256 51a5f5c4c585b5fc77fb4f41efbcf8afed9b7fadca222f27a8d99058bae66bb2
MD5 6041cbe0fc9e5eb0cdc8183647a786b4
SHA1 ea67ae2ee3ceba1719f79c5534c9cdbebde6ab76
SHA512 1144be3519808f8a4525dd81dc47590c3423683caa4fd6bddbb58b57740e5a0ff915e1c366476d2c353503b70d2cc04dc8bbb398c5b6b558336499d02b7cadf7
SSDEEP 768:PMP/r1Iu4NVwYMhYf5VJqxSjRR7zM1ckx080ffdnogh/:PUGuMyY9Qo/keF1fh/
TLSH
T17453F713AA1A3392E2529130685D6A7CC2E7E4660B509BEB0384DD6C0DF3AD1DD7B1DF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28479

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord6835 ord4589 ord4588 ord6856 ord4899 ord4370 ord4892 ord6817 ord5076 ord4340 ord4347 ord4720 ord4889 ord4531 ord4545 ord4543 ord4526 ord4529 ord4524 ord4963 ord4960 ord4108 ord6054 ord4078 ord1776 ord4407 ord5240 ord2385 ord5163 ord6374 ord4353 ord5281 ord3798 ord4837 ord4441 ord2648 ord2055 ord6376 ord3748 ord5065 ord1725 ord5260 ord2446 ord6614 ord5277 ord2982 ord3147 ord3259 ord4465 ord6691 ord3262 ord2985 ord3081 ord2976 ord3830 ord3831 ord3825 ord3079 ord4080 ord4627 ord4432 ord6478 ord825 ord6514 ord800 ord6403 ord924 ord537 ord3663 ord540 ord858 ord860 ord4278 ord4129 ord5440 ord6383 ord5450 ord6394 ord791 ord1247 ord523 ord535 ord2818 ord926 ord2029 ord2077 ord941 ord6812 ord2820 ord6815 ord6845 ord2764 ord4673 ord815 ord4274 ord6375 ord4486 ord2554 ord2512 ord5731 ord3922 ord1089 ord5199 ord2396 ord3346 ord5300 ord5302 ord2725 ord4079 ord823 ord5307 ord5289 ord5714 ord3136 ord4622 ord4424 ord3738 ord561 ord641 ord2514 ord3522 ord1134 ord2614 ord5651 ord3127 ord3616 ord2393 ord690 ord798 ord1988 ord1997 ord6392 ord5194 ord350 ord5207 ord533 ord389 ord1158 ord6648 ord668 ord2770 ord356 ord5265 ord4376 ord4853 ord4998 ord6052 ord1775 ord5241 ord5280 ord3749 ord1727 ord5261 ord2124 ord4425 ord3597 ord1146 ord1168 ord324 ord4234 ord5981 ord6199 ord1768 ord6803 ord6197 ord6380 ord4710 ord6379 ord2258 ord2379 ord755 ord470 ord1140 ord6877 ord6215 ord6377 ord6857 ord6807 ord6591 ord6650 ord6800 ord6597 ord6846 ord6816 ord6858 ord6867 ord6814 ord6847 ord6855 ord6859 ord6832 ord3811 ord6823 ord922 ord5710 ord4698 ord1576

msvcrt

_controlfp __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ ?terminate@@YAXXZ _except_handler3 _onexit _setmbcp __CxxFrameHandler _mbscmp __set_app_type sscanf _itoa atoi __dllonexit

kernel32

DeleteFileA GetWindowsDirectoryA GetTickCount GetPrivateProfileIntA CreateDirectoryA ExpandEnvironmentStringsA GetPrivateProfileStringA lstrcpyA WritePrivateProfileStringA lstrlenA GetStartupInfoA GetModuleHandleA Sleep

user32

GetClientRect SendMessageA GetSystemMetrics IsIconic DrawIcon BringWindowToTop LoadIconA PostMessageA FindWindowA KillTimer EnableWindow SetTimer

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyA RegSetValueExA RegOpenKeyExA

shell32

ShellExecuteA

wsock32

gethostname