jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]74b1117546382fc3877dd21e19c29944

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.74b1117546382fc3877dd21e19c29944
Size 2.1MB
Sample261009-vb5g2ass6p
SHA256 6b7d968f9210f90fe17808e3c66e650b187497c3e8adcb331f2a4b3e995c89b1
MD5 74b1117546382fc3877dd21e19c29944
SHA1 d572e095885de8500aaffe7a9e0644dc216dca58
SHA512 31f0ad0e52c959d833cf9e4c0dbcc1d5e3285bc8316c347e77f2a4a6349e57c177f663827d19684e5ecadfeaa5ed7a60b9c465aae446f7108b0941232b0acd12
SSDEEP 24576:5+U53Qmgjz5mtQgH2YVZ0xpo7gvY54Qd:I4QmGmQgHPaIyY6Qd
TLSH
T153A5122675C1C4B6D1B31A301C54E6F9B6387BB02F61492BB398C32E4E255D19B3AF63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.74b1117546382fc3877dd21e19c29944

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.74b1117546382fc3877dd21e19c29944

.exe 2.1MB

jaffacakes118_HEUR.Trojan.Win32.Generic.74b1117546382fc3877dd21e19c29944

IMPHASH f580b542f006e3b5bb4a32ffbb94aaf9
SHA256 6b7d968f9210f90fe17808e3c66e650b187497c3e8adcb331f2a4b3e995c89b1
MD5 74b1117546382fc3877dd21e19c29944
SHA1 d572e095885de8500aaffe7a9e0644dc216dca58
SHA512 31f0ad0e52c959d833cf9e4c0dbcc1d5e3285bc8316c347e77f2a4a6349e57c177f663827d19684e5ecadfeaa5ed7a60b9c465aae446f7108b0941232b0acd12
SSDEEP 24576:5+U53Qmgjz5mtQgH2YVZ0xpo7gvY54Qd:I4QmGmQgHPaIyY6Qd
TLSH
T153A5122675C1C4B6D1B31A301C54E6F9B6387BB02F61492BB398C32E4E255D19B3AF63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12782

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EncodePointer DecodePointer WriteConsoleW SetFilePointerEx GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap GetStringTypeW GetFileType SetStdHandle VirtualProtect GetConsoleMode GetModuleHandleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc CloseHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW CreateFileW

user32

GetDC ReleaseDC

gdi32

CreateFontW CreateSolidBrush CreateMetaFileW CreateBitmapIndirect CreateBrushIndirect ColorCorrectPalette CreateHalftonePalette CreateHatchBrush

shell32

SHFileOperationW DuplicateIcon DragQueryPoint DragQueryFileW DragFinish DragAcceptFiles DoEnvironmentSubstW ord256 ord192 ord168 ord167 ord98 ord92 ord90

advapi32

ConvertToAutoInheritPrivateObjectSecurity QueryRecoveryAgentsOnEncryptedFile