jaffacakes118_Trojan[.]Win32[.]Inject[.]adstd[.]aae004f7758c24cca4ea5be510381d6e

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Inject.adstd.aae004f7758c24cca4ea5be510381d6e
Size 431KB
Sample261018-wpedfaca79
SHA256 f29646127abaf67a48f15f209812ff9e3a8d5d8976edfcaab56c9c611560dbb7
MD5 aae004f7758c24cca4ea5be510381d6e
SHA1 23546bef40848874719711bff5dde39ca65a15c8
SHA512 b40c0c4842803dc6586f4094e33f1124154cf9612841f79cfcade90f2cc36c21d2c80cbec626986e4f4c87987420fb672c8da8daada65e813643a29b5f68bb8f
SSDEEP 12288:hxaVAh64U5lToZUPvkHUO0FuvTIV65Ho6RIFGUc0iblbaA:hxaVxr59oMo7VvsV65NqFGllbD
TLSH
T12694021237D730BFE2A276304DBA266696B1FC395629ED0DFF91060E3E526428512B73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Inject.adstd.aae004f7758c24cca4ea5be510381d6e

File Explorer

jaffacakes118_Trojan.Win32.Inject.adstd.aae004f7758c24cca4ea5be510381d6e

.exe 431KB

jaffacakes118_Trojan.Win32.Inject.adstd.aae004f7758c24cca4ea5be510381d6e

IMPHASH 2b8c9d9ab6fefc247adaf927e83dcea6
SHA256 f29646127abaf67a48f15f209812ff9e3a8d5d8976edfcaab56c9c611560dbb7
MD5 aae004f7758c24cca4ea5be510381d6e
SHA1 23546bef40848874719711bff5dde39ca65a15c8
SHA512 b40c0c4842803dc6586f4094e33f1124154cf9612841f79cfcade90f2cc36c21d2c80cbec626986e4f4c87987420fb672c8da8daada65e813643a29b5f68bb8f
SSDEEP 12288:hxaVAh64U5lToZUPvkHUO0FuvTIV65Ho6RIFGUc0iblbaA:hxaVxr59oMo7VvsV65NqFGllbD
TLSH
T12694021237D730BFE2A276304DBA266696B1FC395629ED0DFF91060E3E526428512B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

46017

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

comctl32

InitCommonControlsEx

shlwapi

SHAutoComplete

kernel32

DeleteFileW DeleteFileA CreateDirectoryA CreateDirectoryW FindClose FindNextFileA FindFirstFileA FindNextFileW FindFirstFileW GetTickCount WideCharToMultiByte GlobalAlloc GetVersionExW GetFullPathNameA GetFullPathNameW MultiByteToWideChar GetModuleFileNameW FindResourceW GetModuleHandleW HeapAlloc GetProcessHeap HeapFree HeapReAlloc CompareStringA ExitProcess GetLocaleInfoW SetFileAttributesW DosDateTimeToFileTime GetDateFormatW GetTimeFormatW FileTimeToSystemTime FileTimeToLocalFileTime ExpandEnvironmentStringsW WaitForSingleObject Sleep GetExitCodeProcess GetTempPathW MoveFileExW UnmapViewOfFile MapViewOfFile GetCommandLineW CreateFileMappingW SetEnvironmentVariableW OpenFileMappingW GetProcAddress LocalFileTimeToFileTime SystemTimeToFileTime GetSystemTime CompareStringW IsDBCSLeadByte GetCPInfo SetCurrentDirectoryW LoadLibraryW FreeLibrary SetFileAttributesA GetFileAttributesW GetFileAttributesA WriteFile GetStdHandle ReadFile CreateFileW GetCurrentDirectoryW CreateFileA GetFileType SetEndOfFile SetFilePointer MoveFileW SetFileTime GetCurrentProcess CloseHandle SetLastError GetLastError GetNumberFormatW

user32

wvsprintfA wvsprintfW ReleaseDC GetDC SendMessageW SetDlgItemTextW SetFocus EndDialog DestroyIcon SendDlgItemMessageW GetDlgItemTextW GetClassNameW DialogBoxParamW IsWindowVisible WaitForInputIdle SetForegroundWindow GetSysColor PostMessageW LoadBitmapW LoadIconW CharToOemA OemToCharA GetParent MapWindowPoints CreateWindowExW UpdateWindow LoadCursorW RegisterClassExW SetWindowLongW GetWindowLongW DefWindowProcW PeekMessageW GetMessageW TranslateMessage DispatchMessageW DestroyWindow CopyRect IsWindow CharToOemBuffW MessageBoxW ShowWindow GetDlgItem EnableWindow OemToCharBuffA CharUpperA CharToOemBuffA LoadStringW SetWindowPos GetWindowTextW SetWindowTextW GetSystemMetrics GetWindow CharUpperW FindWindowExW GetWindowRect GetClientRect

gdi32

GetDeviceCaps GetObjectW CreateCompatibleBitmap SelectObject StretchBlt CreateCompatibleDC DeleteObject DeleteDC

comdlg32

GetOpenFileNameW CommDlgExtendedError GetSaveFileNameW

advapi32

RegOpenKeyExW LookupPrivilegeValueW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey SetFileSecurityW SetFileSecurityA OpenProcessToken AdjustTokenPrivileges

shell32

SHChangeNotify ShellExecuteExW SHFileOperationW SHGetFileInfoW SHGetSpecialFolderLocation SHGetMalloc SHBrowseForFolderW SHGetPathFromIDListW

ole32

OleUninitialize OleInitialize CoCreateInstance CreateStreamOnHGlobal CLSIDFromString

oleaut32

VariantInit