jaffacakes118_Trojan[.]Win32[.]Inject[.]akflw[.]8f2429926b27aa8d76aed78ad1aca764

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Inject.akflw.8f2429926b27aa8d76aed78ad1aca764
Size 516KB
Sample261018-xdncmsgs3k
SHA256 9b1915b822638515aca1065d39d4e86f24a9608021ca020b836e59b92c22f4c5
MD5 8f2429926b27aa8d76aed78ad1aca764
SHA1 02af7f225b7439c3d56adf8df9a3f5586e81f3ae
SHA512 ee1147ccfd6f894364aaf1051680aa7961748acbdb60cfc3af20c2aebba0372e477de321b5ffb4d28f75db513a059bd3fd3ba6e2854e3aaed3c13ef0246ffe94
SSDEEP 12288:ynYsb73UZVAotrcVaJVv/EtztYKQAHpHOySCpljx4aFo6HI:ab7yVAot5VoBYKQcp1ppll4mI
TLSH
T121B4E1928A950E77ED4E393C26B15F8ECB22E9DA344C8D0F1355649E24BF4B1C866C0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Inject.akflw.8f2429926b27aa8d76aed78ad1aca764

File Explorer

jaffacakes118_Trojan.Win32.Inject.akflw.8f2429926b27aa8d76aed78ad1aca764

.exe 516KB

jaffacakes118_Trojan.Win32.Inject.akflw.8f2429926b27aa8d76aed78ad1aca764

IMPHASH eef96da057b088facca0f62528b40116
SHA256 9b1915b822638515aca1065d39d4e86f24a9608021ca020b836e59b92c22f4c5
MD5 8f2429926b27aa8d76aed78ad1aca764
SHA1 02af7f225b7439c3d56adf8df9a3f5586e81f3ae
SHA512 ee1147ccfd6f894364aaf1051680aa7961748acbdb60cfc3af20c2aebba0372e477de321b5ffb4d28f75db513a059bd3fd3ba6e2854e3aaed3c13ef0246ffe94
SSDEEP 12288:ynYsb73UZVAotrcVaJVv/EtztYKQAHpHOySCpljx4aFo6HI:ab7yVAot5VoBYKQcp1ppll4mI
TLSH
T121B4E1928A950E77ED4E393C26B15F8ECB22E9DA344C8D0F1355649E24BF4B1C866C0F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12117

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetCapture LoadMenuW SetFocus ReleaseCapture GetMenu VkKeyScanExA IsCharLowerA EndDialog DefWindowProcA IMPSetIMEA ModifyMenuA ShowCursor GetQueueStatus CharLowerBuffW GetGuiResources SetScrollInfo SetProcessDefaultLayout GetCaretBlinkTime SetPropA UnhookWindowsHook GetSystemMetrics DlgDirListA

kernel32

GetProcAddress VirtualProtect ExitProcess GetModuleHandleA LoadLibraryA VirtualAlloc GetLastError GetAtomNameA DefineDosDeviceW BackupWrite SetLastConsoleEventActive GetStringTypeExW GetTimeZoneInformation GetCommConfig QueryActCtxW VerLanguageNameA VerLanguageNameW GetFileType EnumDateFormatsExW MoveFileExW WinExec

comctl32

InitCommonControls RemoveWindowSubclass ImageList_AddMasked DSA_DeleteAllItems CreateToolbar ImageList_Merge DPA_Search FlatSB_SetScrollInfo ImageList_DrawEx ImageList_ReplaceIcon PropertySheet FlatSB_SetScrollRange

ole32

OleUninitialize OleInitialize HBITMAP_UserSize StgOpenStorageOnHandle OleCreateLinkEx CoMarshalInterface OleDuplicateData OleConvertOLESTREAMToIStorage CoRegisterSurrogate HBRUSH_UserUnmarshal CoGetObjectContext HICON_UserFree OleMetafilePictFromIconAndLabel

winspool.drv

DeleteFormA PrinterProperties SplDriverUnloadComplete EnumPrintersA FlushPrinter DeletePrinterDriverA AdvancedSetupDialog EnumFormsA GetJobA GetPrinterDriverA

version

VerInstallFileW VerFindFileA GetFileVersionInfoA VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW VerFindFileW VerQueryValueA