jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]717410d70f967c92fe2bed463b23dc57

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.717410d70f967c92fe2bed463b23dc57
Size 2.7MB
Sample261009-vbtersss6k
SHA256 4481ddd941d5055cdef718514451ae1dd5c710f75b530687230d077985015b72
MD5 717410d70f967c92fe2bed463b23dc57
SHA1 fb07d02f8295974a66a61a5a2cc59fadf6de8446
SHA512 6e3cd60500fc312b2075137024d57b4be85c401e25fb2b94d9fbb5647da95e3709b3d31728527297df1a1d5833663bb207cf3e6d40f1842d11fbd4fb5f144239
SSDEEP 49152:6eYeyyeZDM/o0YLnYchEan2mIVgOpDt7QyanlgTTZQJAQgXaaa4GdlmfOYMnYx:6eNyyeZChkYch/p5OpDbgtWZp5GdsfHP
TLSH
T1B0D533A0F8D1CC72E577AD760CB5DB366B3CF9B41F298CAF3B48466A47160A204355A3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.717410d70f967c92fe2bed463b23dc57

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.717410d70f967c92fe2bed463b23dc57

.exe 2.7MB

jaffacakes118_HEUR.Trojan.Win32.Generic.717410d70f967c92fe2bed463b23dc57

IMPHASH f9ec2ce28ffd0d60d4528086c7b52e98
SHA256 4481ddd941d5055cdef718514451ae1dd5c710f75b530687230d077985015b72
MD5 717410d70f967c92fe2bed463b23dc57
SHA1 fb07d02f8295974a66a61a5a2cc59fadf6de8446
SHA512 6e3cd60500fc312b2075137024d57b4be85c401e25fb2b94d9fbb5647da95e3709b3d31728527297df1a1d5833663bb207cf3e6d40f1842d11fbd4fb5f144239
SSDEEP 49152:6eYeyyeZDM/o0YLnYchEan2mIVgOpDt7QyanlgTTZQJAQgXaaa4GdlmfOYMnYx:6eNyyeZChkYch/p5OpDbgtWZp5GdsfHP
TLSH
T1B0D533A0F8D1CC72E577AD760CB5DB366B3CF9B41F298CAF3B48466A47160A204355A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5744

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetConsoleWindow CreateFileW DecodePointer EncodePointer WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetACP HeapFree HeapAlloc CloseHandle FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA CompareStringW LCMapStringW SetStdHandle GetFileType GetStringTypeW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx RaiseException

user32

ShowWindow

ole32

CoRegisterMessageFilter

Name

.text

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

804KB

Virtual Size

803KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.717410d70f967c92fe2bed463b23dc57

kernel32

user32

ole32

generic