jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]2d0af6149a43cd6f4255780590932e7b

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.2d0af6149a43cd6f4255780590932e7b
Size 141KB
Sample261009-t3lcssbz2t
SHA256 0f3cf24fff295218c2368fbfd193bf868a025828168a34669df5bcb93b595472
MD5 2d0af6149a43cd6f4255780590932e7b
SHA1 916d90069f7ee46ab957667e010030b9ef84b01c
SHA512 a911c0c7d9c2be9ff5501f1b6e17f38a3e4e454dc9a4ef7e80325e2629911508ec3c1226629a185b020dc5167c471a06f5bdba4863b336bdf9ad82de495c51ba
SSDEEP 1536:JMltOCXIh8s5LeloMHga0kyqd5SeZLPOUNVjJ6tVe1lt1XMltj0o2MldGYJKj:KA54vWqd5S/ud1pUjH2MTDKj
TLSH
T1DCE3BF1E34C0C477C09A45B58868F7417AEEE825677686C377E62BAFDF211E16B3D202
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.2d0af6149a43cd6f4255780590932e7b

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2d0af6149a43cd6f4255780590932e7b

.exe 141KB

jaffacakes118_HEUR.Trojan.Win32.Generic.2d0af6149a43cd6f4255780590932e7b

IMPHASH 0641d120c17a37cc740447184fd600b4
SHA256 0f3cf24fff295218c2368fbfd193bf868a025828168a34669df5bcb93b595472
MD5 2d0af6149a43cd6f4255780590932e7b
SHA1 916d90069f7ee46ab957667e010030b9ef84b01c
SHA512 a911c0c7d9c2be9ff5501f1b6e17f38a3e4e454dc9a4ef7e80325e2629911508ec3c1226629a185b020dc5167c471a06f5bdba4863b336bdf9ad82de495c51ba
SSDEEP 1536:JMltOCXIh8s5LeloMHga0kyqd5SeZLPOUNVjJ6tVe1lt1XMltj0o2MldGYJKj:KA54vWqd5S/ud1pUjH2MTDKj
TLSH
T1DCE3BF1E34C0C477C09A45B58868F7417AEEE825677686C377E62BAFDF211E16B3D202
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14159

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleFileNameExA

kernel32

FreeEnvironmentStringsW ExitProcess GetProcAddress GetModuleHandleA GetCurrentProcess GetLastError FindResourceExA LockResource LoadResource FindResourceA WaitForSingleObject CreateThread SetLastError LoadLibraryA IsBadReadPtr VirtualProtect VirtualAlloc HeapAlloc GetCommandLineA GetStartupInfoA HeapFree RaiseException CloseHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection MultiByteToWideChar ReadFile DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType SetFilePointer RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoA SetEndOfFile GetProcessHeap LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

Sharing