jaffacakes118_Trojan[.]Win32[.]Homepage[.]f[.]7ec4b0e72222b95deabc47b2744e2c95

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Homepage.f.7ec4b0e72222b95deabc47b2744e2c95
Size 32KB
Sample261018-why49ssxhs
SHA256 1939f415b3872d23eb8bfc591d37d82c28e26553f956b618b83f7230f5554850
MD5 7ec4b0e72222b95deabc47b2744e2c95
SHA1 9f76008ce6484e11c9aa8b48d50a0f23b0ac3cc1
SHA512 6b60753b072e865f08981f92109f570c682d291257c731f796ab1658b85da98b94a7c3758050f48ec985356dc084f440369bd0ee50d3b00da983f1842415c5ca
SSDEEP 384:zJgLGyteXNYIC9yFS2oosicZ80wt8V615bJJK0ha2u7+:e5ed9CUFS2RcZ80w8V85XKVO
TLSH
T1D4E2C507FA8ECDA2C62186345A6EAA78C13B5CA11F904BBBD744EF2C0C735D19B2615C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Homepage.f.7ec4b0e72222b95deabc47b2744e2c95

File Explorer

jaffacakes118_Trojan.Win32.Homepage.f.7ec4b0e72222b95deabc47b2744e2c95

.exe 32KB

jaffacakes118_Trojan.Win32.Homepage.f.7ec4b0e72222b95deabc47b2744e2c95

IMPHASH 5c0fe5889669fd7305ae07d4fa1af6dd
SHA256 1939f415b3872d23eb8bfc591d37d82c28e26553f956b618b83f7230f5554850
MD5 7ec4b0e72222b95deabc47b2744e2c95
SHA1 9f76008ce6484e11c9aa8b48d50a0f23b0ac3cc1
SHA512 6b60753b072e865f08981f92109f570c682d291257c731f796ab1658b85da98b94a7c3758050f48ec985356dc084f440369bd0ee50d3b00da983f1842415c5ca
SSDEEP 384:zJgLGyteXNYIC9yFS2oosicZ80wt8V615bJJK0ha2u7+:e5ed9CUFS2RcZ80w8V85XKVO
TLSH
T1D4E2C507FA8ECDA2C62186345A6EAA78C13B5CA11F904BBBD744EF2C0C735D19B2615C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12922

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord5302 ord4079 ord4698 ord5307 ord5289 ord5714 ord2982 ord3147 ord3259 ord4465 ord3136 ord3262 ord2985 ord3081 ord2976 ord3830 ord3831 ord3825 ord3079 ord4080 ord4622 ord4424 ord3738 ord815 ord800 ord858 ord5300 ord2725 ord540 ord561 ord825 ord791 ord1995 ord2029 ord2077 ord523 ord641 ord2514 ord2621 ord1134 ord537 ord1247 ord5651 ord3127 ord3616 ord3663 ord2393 ord690 ord798 ord1988 ord1997 ord6392 ord5194 ord350 ord5207 ord924 ord860 ord5199 ord5265 ord4376 ord4853 ord4998 ord6052 ord4078 ord1775 ord4407 ord5241 ord2385 ord5163 ord6374 ord4353 ord5280 ord3798 ord4837 ord4441 ord2648 ord2055 ord6376 ord3749 ord4673 ord1727 ord5261 ord2446 ord2124 ord5277 ord4627 ord4425 ord3597 ord1146 ord1168 ord324 ord4234 ord6215 ord6197 ord6377 ord6402 ord4710 ord2379 ord755 ord470 ord922 ord2764 ord2614 ord668 ord5710 ord356 ord2770 ord3522 ord2554 ord4486 ord6375 ord4274 ord3346 ord2396 ord5731 ord1089 ord3922 ord533 ord2512 ord389 ord535 ord5065 ord1576

msvcrt

__p__fmode __set_app_type _except_handler3 _controlfp __setusermatherr __p__commode _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ _onexit __dllonexit _setmbcp __CxxFrameHandler atoi _adjust_fdiv

kernel32

GetWindowsDirectoryA DeleteFileA SetFileAttributesA lstrcpyA GetModuleHandleA GetTickCount lstrlenA GetStartupInfoA

user32

GetTopWindow KillTimer SetTimer GetWindowTextA GetWindow GetSystemMetrics GetClientRect LoadIconA SendMessageA EnableWindow GetDesktopWindow FindWindowA DrawIcon IsIconic

advapi32

RegDeleteValueA RegSetValueExA RegOpenKeyExA

shell32

ShellExecuteA