jaffacakes118_Trojan[.]Win32[.]FakeAV[.]cxsa[.]dcfa8e28ddd5436862c45eac1f19098d

General

Target
jaffacakes118_Trojan.Win32.FakeAV.cxsa.dcfa8e28ddd5436862c45eac1f19098d
Size 241KB
Sample261018-x6e7qstyay
SHA256 a681db2d0f45d4a4d0ecceaafe6b203b745447dde2e5810368e06aec05851e13
MD5 dcfa8e28ddd5436862c45eac1f19098d
SHA1 dcf4baef7474554621a7250d49588c365555f152
SHA512 18a713834959f34683c189558aeafcfb143fe04a0b180a1630c16b268acec6228d84047249e130d2f3b2abccfaa940b878c6644c93b18799c1ddab7d2122fb56
SSDEEP 6144:+MEXmW6wgIG9ejWITeBcBvSFaVqmpb4NhTQZhyk6BY2zkUFBV:+rT6wK9ElNMaVqmpb4NhTQZhyk6BY2zV
TLSH
T1E5347C35C34BE1E8E555AC7DBA768A316BEA5C92F3D0067D37E9740D522302C79CA28C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.FakeAV.cxsa.dcfa8e28ddd5436862c45eac1f19098d

File Explorer

jaffacakes118_Trojan.Win32.FakeAV.cxsa.dcfa8e28ddd5436862c45eac1f19098d

.exe 241KB

jaffacakes118_Trojan.Win32.FakeAV.cxsa.dcfa8e28ddd5436862c45eac1f19098d

IMPHASH f724b63252d8e709a15dd8175a75ec6c
SHA256 a681db2d0f45d4a4d0ecceaafe6b203b745447dde2e5810368e06aec05851e13
MD5 dcfa8e28ddd5436862c45eac1f19098d
SHA1 dcf4baef7474554621a7250d49588c365555f152
SHA512 18a713834959f34683c189558aeafcfb143fe04a0b180a1630c16b268acec6228d84047249e130d2f3b2abccfaa940b878c6644c93b18799c1ddab7d2122fb56
SSDEEP 6144:+MEXmW6wgIG9ejWITeBcBvSFaVqmpb4NhTQZhyk6BY2zkUFBV:+rT6wK9ElNMaVqmpb4NhTQZhyk6BY2zV
TLSH
T1E5347C35C34BE1E8E555AC7DBA768A316BEA5C92F3D0067D37E9740D522302C79CA28C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9713

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW CloseHandle VirtualAlloc Sleep SizeofResource GetModuleHandleA LockResource LoadResource FindResourceExA PulseEvent FreeResource VirtualFree LoadLibraryA GetSystemTime VirtualProtect LocalAlloc GlobalFree WriteFile CreateFileA GlobalAlloc GetProcAddress LCMapStringW LCMapStringA MultiByteToWideChar GetOEMCP GetACP GetCPInfo HeapReAlloc RtlUnwind HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetStringTypeW GetEnvironmentStrings WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA FreeLibrary GetStringTypeA ExitProcess UnhandledExceptionFilter GetCurrentProcess GetStartupInfoA GetCommandLineA GetVersion HeapFree HeapAlloc TerminateProcess

user32

MessageBoxA PostQuitMessage CreateWindowExA ShowWindow UpdateWindow LoadIconA RegisterClassExA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA LoadCursorA EndDialog LoadStringA DialogBoxParamA DestroyWindow DefWindowProcA BeginPaint GetClientRect DrawTextA EndPaint

gdi32

GetObjectA GetDIBits

ole32

CoInitialize

Sharing