jaffacakes118_Trojan[.]Win32[.]Cutwail[.]wwn[.]1cf9122e2e036e9ab8475ac5ccf468ed

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Cutwail.wwn.1cf9122e2e036e9ab8475ac5ccf468ed
Size 304KB
Sample261018-zzlr2sax71
SHA256 aaf89a4594696686191e6930aaacd16c58dea24e6705362361b94d3e81207e56
MD5 1cf9122e2e036e9ab8475ac5ccf468ed
SHA1 02f546206cc7c3f247d74f4e0583bb1e7276325b
SHA512 d2ae43dcaf07a8a58a649a09c8857f598dc6480b732d24e623809a48e31700634dc7bce7a84781a62451abef697ae286926f7ab7ca9605304c3441256331915b
SSDEEP 6144:b6MDovwuuec7huu9dddddfohy3apusWnqGhzBNS4X:ovwuOsWFhzBNSY
TLSH
T14B6428E66F52D0EBEB672CB0564581BCC52A9D374C23877216BCFA3C9A345F82507B84
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Cutwail.wwn.1cf9122e2e036e9ab8475ac5ccf468ed

File Explorer

jaffacakes118_Trojan.Win32.Cutwail.wwn.1cf9122e2e036e9ab8475ac5ccf468ed

.exe 304KB

jaffacakes118_Trojan.Win32.Cutwail.wwn.1cf9122e2e036e9ab8475ac5ccf468ed

IMPHASH cd37ded06f163ceb9f06ebd963ab3836
SHA256 aaf89a4594696686191e6930aaacd16c58dea24e6705362361b94d3e81207e56
MD5 1cf9122e2e036e9ab8475ac5ccf468ed
SHA1 02f546206cc7c3f247d74f4e0583bb1e7276325b
SHA512 d2ae43dcaf07a8a58a649a09c8857f598dc6480b732d24e623809a48e31700634dc7bce7a84781a62451abef697ae286926f7ab7ca9605304c3441256331915b
SSDEEP 6144:b6MDovwuuec7huu9dddddfohy3apusWnqGhzBNS4X:ovwuOsWFhzBNSY
TLSH
T14B6428E66F52D0EBEB672CB0564581BCC52A9D374C23877216BCFA3C9A345F82507B84
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

45941

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Cult\infringement\Whil.pdb

kernel32

GetCurrentDirectoryA GetLocalTime GetConsoleTitleA GetTickCount GetCurrentProcessId SetConsoleTitleA Sleep CreateEventA WaitForSingleObject GetTimeFormatW GetDateFormatW LoadLibraryA SetStdHandle WriteConsoleW CloseHandle IsProcessorFeaturePresent GetStringTypeW MultiByteToWideChar LCMapStringW SetFilePointer FlushFileBuffers GetConsoleMode GetConsoleCP HeapReAlloc VirtualLock LoadLibraryW HeapSize RtlUnwind IsValidCodePage GetOEMCP GetACP GetCPInfo GetSystemTimeAsFileTime VirtualAlloc GetConsoleWindow DeleteFileA WriteFile CreateFileA lstrcmpiA QueryPerformanceCounter HeapCreate InterlockedDecrement GetCurrentThreadId SetLastError InterlockedIncrement TlsFree TlsSetValue TlsGetValue TlsAlloc DeleteCriticalSection GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW GetLastError FormatMessageA GetThreadLocale RaiseException GetCommandLineA HeapSetInformation GetStartupInfoW EnterCriticalSection LeaveCriticalSection HeapAlloc DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess HeapFree GetProcAddress GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte CreateFileW

user32

FindWindowA GetParent GetClientRect MapWindowPoints GetClassNameA GetWindowLongA LoadStringA LoadMenuA GetSubMenu GetDesktopWindow EnumPropsA GetForegroundWindow SendMessageW InflateRect RemoveMenu DialogBoxParamA GetCursorPos FindWindowW LoadCursorA wsprintfA GetSystemMetrics IsIconic LoadImageA SystemParametersInfoA InvalidateRect SendMessageA GetDlgItem DestroyMenu

gdi32

GetPixel MoveToEx DeleteObject CreateFontIndirectA SetLayout

ole32

CreatePointerMoniker CoInitialize

odbc32

ord9

ws2_32

WSAStartup

winscard

SCardEstablishContext SCardTransmit SCardConnectA SCardListReadersA

opengl32

glViewport glMatrixMode glLoadIdentity glOrtho

glu32

gluLookAt