jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]04d5dc73305a17f45de1460d64ad4d81

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.04d5dc73305a17f45de1460d64ad4d81
Size 2.0MB
Sample261009-twstasce76
SHA256 43994a1ef2d5c8720d9db6f0879c2dbc3e7cf2733878e6d3795643c4df357c36
MD5 04d5dc73305a17f45de1460d64ad4d81
SHA1 aa56c171f5e714434c093db6df28aa87a8c9d6de
SHA512 fb33ad46413ce8a2dbd9f9f28cf8b75fa61d3ef3a3da2c3839a96583627a2857b7a5f78f5c3966062ab2b4dc9f321ca59e7f12dd18bad7b5476428372d1866b9
SSDEEP 49152:fmCEEXh/0N6f1j7QyanlgTTZQJAZgXaaa4GdlmfOYMnYx:fmCEEXhw6vgtWgp5GdsfHP
TLSH
T1B3A53367F8C29812E8BA69361CB4AB759A3DB5F02FB4CDAF175807158F141D34A36223
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.04d5dc73305a17f45de1460d64ad4d81

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.04d5dc73305a17f45de1460d64ad4d81

.exe 2.0MB

jaffacakes118_HEUR.Trojan.Win32.Generic.04d5dc73305a17f45de1460d64ad4d81

IMPHASH 6eb0e25699439d57e1c39cc107f281c2
SHA256 43994a1ef2d5c8720d9db6f0879c2dbc3e7cf2733878e6d3795643c4df357c36
MD5 04d5dc73305a17f45de1460d64ad4d81
SHA1 aa56c171f5e714434c093db6df28aa87a8c9d6de
SHA512 fb33ad46413ce8a2dbd9f9f28cf8b75fa61d3ef3a3da2c3839a96583627a2857b7a5f78f5c3966062ab2b4dc9f321ca59e7f12dd18bad7b5476428372d1866b9
SSDEEP 49152:fmCEEXh/0N6f1j7QyanlgTTZQJAZgXaaa4GdlmfOYMnYx:fmCEEXhw6vgtWgp5GdsfHP
TLSH
T1B3A53367F8C29812E8BA69361CB4AB759A3DB5F02FB4CDAF175807158F141D34A36223
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5622

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

172B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jaffacakes118_HEUR.Trojan.Win32.Generic.04d5dc73305a17f45de1460d64ad4d81

kernel32

user32

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.04d5dc73305a17f45de1460d64ad4d81

kernel32

user32

generic