jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]01c984b625ac83c9f8040

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.01c984b625ac83c9f8040
Size 181KB
Sample261009-twdpdabx7w
SHA256 c3ddf96b27ea8f79bb7472a7801bf2b3432fd9013d4ca957770f310285530591
MD5 13b888d41af01c984b625ac83c9f8040
SHA1 b33dbc855d2106bcd9bd7906396c5c564ac733b9
SHA512 930bebfa10de0f17275ff7d092782891758f19313e7d2db900955d6beacb29c03093196e34f9103563823db4ff3ad0cd65312e038aeda75f431064acd574dde0
SSDEEP 3072:AEaT/ARHA7AWxOZxOSgJQQEMd1X5yv6CHaX4N6Tyx0yzDV:xar7AjxoJQ921Jyv6MalyzJ
TLSH
T1A604CE0331D2D6B3EA4EA1F044B54AE85E3AA0744B54D3C7BA4B21DBDF713A29F26305
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.01c984b625ac83c9f8040

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.01c984b625ac83c9f8040

.exe 181KB

jaffacakes118_HEUR.Trojan.Win32.Generic.01c984b625ac83c9f8040

IMPHASH f77921326f8989a4b925ba6888ab5eff
SHA256 c3ddf96b27ea8f79bb7472a7801bf2b3432fd9013d4ca957770f310285530591
MD5 13b888d41af01c984b625ac83c9f8040
SHA1 b33dbc855d2106bcd9bd7906396c5c564ac733b9
SHA512 930bebfa10de0f17275ff7d092782891758f19313e7d2db900955d6beacb29c03093196e34f9103563823db4ff3ad0cd65312e038aeda75f431064acd574dde0
SSDEEP 3072:AEaT/ARHA7AWxOZxOSgJQQEMd1X5yv6CHaX4N6Tyx0yzDV:xar7AjxoJQ921Jyv6MalyzJ
TLSH
T1A604CE0331D2D6B3EA4EA1F044B54AE85E3AA0744B54D3C7BA4B21DBDF713A29F26305
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5959

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcpyA LoadLibraryW LocalLock SetTapeParameters GlobalAlloc SetEvent FindVolumeMountPointClose GetFileInformationByHandle InitAtomTable lstrcatA LCMapStringW LCMapStringA GetStringTypeW MultiByteToWideChar GetStringTypeA GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetProcAddress GetDriveTypeA WritePrivateProfileStringA WriteProfileSectionA PeekConsoleInputW LoadLibraryA RtlUnwind GetCommandLineA GetStartupInfoA HeapAlloc GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage

user32

InsertMenuItemW CreateMDIWindowA GrayStringA AppendMenuA GetCaretPos SetPropW GetDCEx SetClassLongA DefWindowProcA DrawAnimatedRects GetWindowTextLengthW UpdateWindow SetWindowsHookW GetWindowTextW LoadCursorA

gdi32

GetTextMetricsW CreateRoundRectRgn MaskBlt GetPolyFillMode GetTextExtentPointW

ole32

OleMetafilePictFromIconAndLabel OleDestroyMenuDescriptor

Sharing