jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]2493a54ed97d45c8771375200bd04476

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.2493a54ed97d45c8771375200bd04476
Size 326KB
Sample261009-t2cdhacf49
SHA256 192aa2a82bb6f7509cd42e570d4c7a2e3f32ff80dc22c64db45953ca202e8129
MD5 2493a54ed97d45c8771375200bd04476
SHA1 101f2c7d708ee86d7cf2f7caad6caf8f1a34d0b1
SHA512 ff39308773a225a7ff5506c277e35511984c1c393d8921e14379c73c872d355a771003d6716137fdadbbf428df1bb1e87adfec6212beeec98789db863240fc4a
SSDEEP 6144:ENDlG4C2DWOkZmuHFqcpAh71tXnEH4ANpft1DEFXfGT8FBcke6m/32a:ClDPAF81vXE7zDkFcj/9
TLSH
T12064122EE781E9B9EDE531F82C1BD932277A3DED601255AF0700B1777BF2105DA26604
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.2493a54ed97d45c8771375200bd04476

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2493a54ed97d45c8771375200bd04476

.exe 326KB

jaffacakes118_HEUR.Trojan.Win32.Generic.2493a54ed97d45c8771375200bd04476

IMPHASH ff2aed682dbb69a67a9625626c219530
SHA256 192aa2a82bb6f7509cd42e570d4c7a2e3f32ff80dc22c64db45953ca202e8129
MD5 2493a54ed97d45c8771375200bd04476
SHA1 101f2c7d708ee86d7cf2f7caad6caf8f1a34d0b1
SHA512 ff39308773a225a7ff5506c277e35511984c1c393d8921e14379c73c872d355a771003d6716137fdadbbf428df1bb1e87adfec6212beeec98789db863240fc4a
SSDEEP 6144:ENDlG4C2DWOkZmuHFqcpAh71tXnEH4ANpft1DEFXfGT8FBcke6m/32a:ClDPAF81vXE7zDkFcj/9
TLSH
T12064122EE781E9B9EDE531F82C1BD932277A3DED601255AF0700B1777BF2105DA26604
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23137

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareStringA EnterCriticalSection ExitProcess FindResourceA GetACP GetCommandLineA GetModuleHandleA GetOEMCP GetPrivateProfileStringA GetStartupInfoA GetSystemTime GetSystemTimeAsFileTime GetTimeFormatA HeapAlloc MultiByteToWideChar SetLastError SetUnhandledExceptionFilter Sleep TlsFree VirtualAlloc VirtualFree lstrcmpA lstrcmpiA lstrlenA

msvcrt

_snwprintf printf fwprintf exit __set_app_type __p__commode __getmainargs wcslen

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA

userenv

GetProfilesDirectoryW GetAppliedGPOListW FreeGPOListW ExpandEnvironmentStringsForUserW UnregisterGPNotification

ntdll

RtlLeaveCriticalSection RtlNtStatusToDosError RtlInitUnicodeString NtEnumerateValueKey NtCreateSection NtCreateEvent LdrLoadDll RtlInitString RtlFreeUnicodeString RtlExpandEnvironmentStrings_U RtlEnterCriticalSection RtlCreateTagHeap NtSetValueKey NtSetInformationProcess NtQueryDefaultLocale NtSetEvent

comdlg32

PrintDlgW PageSetupDlgW PageSetupDlgA LoadAlterBitmap GetSaveFileNameW GetSaveFileNameA GetOpenFileNameW GetOpenFileNameA GetFileTitleW GetFileTitleA FindTextW FindTextA CommDlgExtendedError ChooseFontW ChooseFontA ChooseColorW ChooseColorA

comctl32

InitCommonControlsEx ImageList_ReplaceIcon ImageList_GetIconSize ImageList_Draw ImageList_AddMasked

winmm

midiOutReset midiStreamOut mixerGetDevCapsW mixerGetControlDetailsA midiOutGetNumDevs mixerGetLineControlsW mixerSetControlDetails mmDrvInstall mmGetCurrentTask mmTaskBlock midiOutOpen midiOutShortMsg

oleaut32

RevokeActiveObject OleTranslateColor OleLoadPicture OleIconToCursor ClearCustData SafeArrayAllocData SafeArrayCreate SysReAllocString SysStringLen VarBstrCat VarBstrCmp RegisterTypeLib

oledlg

OleUIBusyA OleUIAddVerbMenuA OleUIBusyW OleUICanConvertOrActivateAs OleUIUpdateLinksA OleUIInsertObjectW OleUIInsertObjectA OleUIEditLinksW OleUIEditLinksA OleUIConvertW OleUIChangeSourceW OleUIChangeSourceA OleUIChangeIconW OleUIAddVerbMenuW OleUIChangeIconA