jaffacakes118_Trojan[.]Win32[.]DelFiles[.]m[.]4bed7b3144db8dd0994e475571634cfc

General

Target
jaffacakes118_Trojan.Win32.DelFiles.m.4bed7b3144db8dd0994e475571634cfc
Size 19KB
Sample261018-z7cjcaay4y
SHA256 a8ee2ac986c86b1a57e6f6e5f7f2610a0126964d3ee2df94b9be8ec0f1c894bc
MD5 4bed7b3144db8dd0994e475571634cfc
SHA1 c6ec91bdef8c3fe71415a44a992806f7570df10e
SHA512 493312bf58eb1452de1370bbcffb81517444baf6174cdf6e0b15bb4a3705d10bf4ccf8f73ffcba854e68f60d6994fee635b1750406673b1465f3adb7d4887eee
SSDEEP 384:UmNvQOJ1qgFsXt39ylYWEgClMuh5BmqCe+0/yJstlabt4jm:BoO2XttylY9VYq/+06Alwmjm
TLSH
T1A092290AAD220B63E9910EBA7257514D7BFE3E333846F05BC9186656E8F44C5C83EB53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.DelFiles.m.4bed7b3144db8dd0994e475571634cfc

File Explorer

jaffacakes118_Trojan.Win32.DelFiles.m.4bed7b3144db8dd0994e475571634cfc

.exe 19KB

jaffacakes118_Trojan.Win32.DelFiles.m.4bed7b3144db8dd0994e475571634cfc

IMPHASH 9b6b7ebd9684dbd7c3b2d82057a994a3
SHA256 a8ee2ac986c86b1a57e6f6e5f7f2610a0126964d3ee2df94b9be8ec0f1c894bc
MD5 4bed7b3144db8dd0994e475571634cfc
SHA1 c6ec91bdef8c3fe71415a44a992806f7570df10e
SHA512 493312bf58eb1452de1370bbcffb81517444baf6174cdf6e0b15bb4a3705d10bf4ccf8f73ffcba854e68f60d6994fee635b1750406673b1465f3adb7d4887eee
SSDEEP 384:UmNvQOJ1qgFsXt39ylYWEgClMuh5BmqCe+0/yJstlabt4jm:BoO2XttylY9VYq/+06Alwmjm
TLSH
T1A092290AAD220B63E9910EBA7257514D7BFE3E333846F05BC9186656E8F44C5C83EB53
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11933

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

iphlpapi

GetIfEntry GetIpAddrTable

wsock32

WSACleanup WSAStartup gethostbyaddr

wininet

InternetConnectA HttpOpenRequestA HttpAddRequestHeadersA HttpSendRequestA InternetCloseHandle InternetSetCookieA InternetOpenA HttpQueryInfoA

urlmon

URLDownloadToFileA

shlwapi

StrStrA StrRChrA StrChrA StrCmpNIA

shfolder

SHGetFolderPathA

kernel32

lstrcpynA SetFilePointer GetModuleHandleA GetCommandLineA lstrcmpiA GetTickCount WriteFile ExitProcess OpenMutexA GetModuleFileNameA GetWindowsDirectoryA FindFirstFileA FindNextFileA CopyFileA CreateFileA ReadFile GetVolumeInformationA CloseHandle UnmapViewOfFile MapViewOfFile CreateFileMappingA GetVersionExA OutputDebugStringA LocalFree lstrlenA LocalAlloc GetProcAddress LoadLibraryA TerminateProcess OpenProcess lstrcatA GetSystemTimeAsFileTime FreeLibrary GetTempPathA lstrcpyA MoveFileA Sleep DeleteFileA GetLastError QueryPerformanceCounter lstrcmpA

user32

LoadStringA wsprintfA

advapi32

RegOpenKeyExA RegCloseKey RegCreateKeyExA RegSetValueExA RegDeleteKeyA RegQueryValueExA RegDeleteValueA

shell32

ShellExecuteA

Sharing