jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]71bb791a027a415184339f370e96ed42

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.71bb791a027a415184339f370e96ed42
Size 2.0MB
Sample261009-vbzxjs1shv
SHA256 ee032b9422a544c8ae384f1f2870b01d7da79ffdc4cd7ccd3daad22b2bae5166
MD5 71bb791a027a415184339f370e96ed42
SHA1 3b28fc6882546ed8f35c2c19c85e2d319086ee34
SHA512 acd5dbce006990ae5ec76933ae2749ad0d2b32ecff65493a1df79b651cd6468685e42b073ff23edb285b226c8bb012d259fae692108dd50ffe0f9700c878d876
SSDEEP 24576:TIGXILkWMh9u9m3mQ5Br2KqvmJBq5TlsB7Em7bwq+BCdQUS:54wNh9Z3mJEBNVEwMqWcQv
TLSH
T1CFA57C13A3547942C5FD45367F7E5AB66E4AB8061026988AFF6287C2D02DF313C12E7B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.71bb791a027a415184339f370e96ed42

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.71bb791a027a415184339f370e96ed42

.exe 2.0MB

jaffacakes118_HEUR.Trojan.Win32.Generic.71bb791a027a415184339f370e96ed42

IMPHASH 664ed26a27e5334c416f3fb1869a2363
SHA256 ee032b9422a544c8ae384f1f2870b01d7da79ffdc4cd7ccd3daad22b2bae5166
MD5 71bb791a027a415184339f370e96ed42
SHA1 3b28fc6882546ed8f35c2c19c85e2d319086ee34
SHA512 acd5dbce006990ae5ec76933ae2749ad0d2b32ecff65493a1df79b651cd6468685e42b073ff23edb285b226c8bb012d259fae692108dd50ffe0f9700c878d876
SSDEEP 24576:TIGXILkWMh9u9m3mQ5Br2KqvmJBq5TlsB7Em7bwq+BCdQUS:54wNh9Z3mJEBNVEwMqWcQv
TLSH
T1CFA57C13A3547942C5FD45367F7E5AB66E4AB8061026988AFF6287C2D02DF313C12E7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5249

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetConsoleWindow VirtualProtect CreateFileW DecodePointer WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetACP HeapFree HeapAlloc CloseHandle FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA CompareStringW LCMapStringW SetStdHandle GetFileType GetStringTypeW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx RaiseException

user32

ShowWindow

ole32

CoRegisterMallocSpy

Sharing