jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]1371c96c51849cf02d6c5357a5024e12

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.1371c96c51849cf02d6c5357a5024e12
Size 311KB
Sample261009-typ57acf28
SHA256 f5e1c164c5ed9192b3aa80008e7136c3c3d82f4a248d687630845512ba7b30fa
MD5 1371c96c51849cf02d6c5357a5024e12
SHA1 39de478b848080ef0430440d2f10f81959f9ce2e
SHA512 a966127921d2fbd0e4977195aebfb563ecb9fb730219abc09b3d5e678e1bd02b8c1b77002bcfc61b82a9377b93980cea024da23635470762066e87511aba0024
SSDEEP 3072:2yW6SCktd7NDcTDpdYWWDI/1dEzJoNefOgmQv:t1ktZpc5dYJDM04e5mQv
TLSH
T10464A533FE67A356C41A01719AF6DAD463A0BE302B35AF26C53D753C4AB1343294B5CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.1371c96c51849cf02d6c5357a5024e12

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.1371c96c51849cf02d6c5357a5024e12

.exe 311KB

jaffacakes118_HEUR.Trojan.Win32.Generic.1371c96c51849cf02d6c5357a5024e12

IMPHASH ef626d3197c558ba94eaf3d90178759d
SHA256 f5e1c164c5ed9192b3aa80008e7136c3c3d82f4a248d687630845512ba7b30fa
MD5 1371c96c51849cf02d6c5357a5024e12
SHA1 39de478b848080ef0430440d2f10f81959f9ce2e
SHA512 a966127921d2fbd0e4977195aebfb563ecb9fb730219abc09b3d5e678e1bd02b8c1b77002bcfc61b82a9377b93980cea024da23635470762066e87511aba0024
SSDEEP 3072:2yW6SCktd7NDcTDpdYWWDI/1dEzJoNefOgmQv:t1ktZpc5dYJDM04e5mQv
TLSH
T10464A533FE67A356C41A01719AF6DAD463A0BE302B35AF26C53D753C4AB1343294B5CA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

62133

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar LoadLibraryA GetProcAddress HeapReAlloc VirtualAlloc HeapAlloc GetSystemTimeAsFileTime GetACP GetCPInfo WriteFile RtlUnwind HeapFree VirtualFree HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetCommandLineA GetTickCount GetOEMCP CloseHandle GetEnvironmentStringsW GetStringTypeW GetEnvironmentStrings GetModuleHandleA GetStartupInfoA GetVersion ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte

user32

CreateWindowExA ShowWindow UpdateWindow GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA LoadIconA LoadCursorA GetClientRect DefWindowProcA DestroyWindow DialogBoxParamA BeginPaint EndPaint PostQuitMessage EndDialog LoadStringA wsprintfA RegisterClassExA

gdi32

TextOutA

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA RegOpenKeyA

shell32

StrRChrA StrStrIA

Sharing