jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]7ec2c531a8dfc58223a923ea54e7d980

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.7ec2c531a8dfc58223a923ea54e7d980
Size 169KB
Sample261009-vcm95scg38
SHA256 3e5781fa2b2c01fc208b8ff39eced05f395022bddb26bac1d41b07d582804f92
MD5 7ec2c531a8dfc58223a923ea54e7d980
SHA1 8d686bbadbaba0bae2145750e371c619da9152c1
SHA512 397b2a4aad4b32b189c812b8a7c0da3a6292243383bfa091e487d091c7dc3c240c5a76672844f23c6d2631e3abf42d7ac0a4f110ccbbaed6acd2e1643be11a51
SSDEEP 3072:uwxVMhOC/dTDbq91+mno3t4QZQ3rbMRDLs+7mRr4NHHu8mjl:uTfFDbRnOTrb+DLs0mxKHHJmjl
TLSH
T11304BF50B7C684B3E49006302CBD5776F579FE35B7B1B29AE74A4E282C74641E802BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.7ec2c531a8dfc58223a923ea54e7d980

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.7ec2c531a8dfc58223a923ea54e7d980

.exe 169KB

jaffacakes118_HEUR.Trojan.Win32.Generic.7ec2c531a8dfc58223a923ea54e7d980

IMPHASH ccc0e829fe1206cd39d147ca374725d4
SHA256 3e5781fa2b2c01fc208b8ff39eced05f395022bddb26bac1d41b07d582804f92
MD5 7ec2c531a8dfc58223a923ea54e7d980
SHA1 8d686bbadbaba0bae2145750e371c619da9152c1
SHA512 397b2a4aad4b32b189c812b8a7c0da3a6292243383bfa091e487d091c7dc3c240c5a76672844f23c6d2631e3abf42d7ac0a4f110ccbbaed6acd2e1643be11a51
SSDEEP 3072:uwxVMhOC/dTDbq91+mno3t4QZQ3rbMRDLs+7mRr4NHHu8mjl:uTfFDbRnOTrb+DLs0mxKHHJmjl
TLSH
T11304BF50B7C684B3E49006302CBD5776F579FE35B7B1B29AE74A4E282C74641E802BB7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA SetFileSecurityA SetFileSecurityW

kernel32

CloseHandle CompareStringA CreateDirectoryA CreateDirectoryW CreateFileA CreateFileW DeleteFileA DeleteFileW DosDateTimeToFileTime ExitProcess ExpandEnvironmentStringsA FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindResourceA FreeLibrary GetCPInfo GetCommandLineA GetCurrentDirectoryA GetCurrentProcess GetDateFormatA GetFileAttributesA GetFileAttributesW GetFileType GetFullPathNameA GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetNumberFormatA GetProcAddress GetProcessHeap GetStdHandle GetSystemTime GetTempPathA GetTickCount GetTimeFormatA GetVersionExA GlobalAlloc HeapAlloc HeapFree HeapReAlloc IsDBCSLeadByte LoadLibraryA LocalFileTimeToFileTime MoveFileA MoveFileExA MultiByteToWideChar ReadFile SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetFileAttributesA SetFileAttributesW SetFilePointer SetFileTime SetLastError Sleep SystemTimeToFileTime WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpiA lstrlenA

comctl32

ord17

comdlg32

CommDlgExtendedError GetOpenFileNameA GetSaveFileNameA

gdi32

DeleteObject

shell32

SHBrowseForFolderA SHChangeNotify SHFileOperationA SHGetFileInfoA SHGetMalloc SHGetSpecialFolderLocation ShellExecuteExA SHGetPathFromIDListA

user32

CharToOemA CharToOemBuffA CharUpperA CopyRect CreateWindowExA DefWindowProcA DestroyIcon DestroyWindow DialogBoxParamA DispatchMessageA EnableWindow EndDialog FindWindowExA GetClassNameA GetClientRect GetDlgItem GetDlgItemTextA GetMessageA GetParent GetSysColor GetSystemMetrics GetWindow GetWindowLongA GetWindowRect GetWindowTextA IsWindow IsWindowVisible LoadBitmapA LoadCursorA LoadIconA LoadStringA MapWindowPoints MessageBoxA OemToCharA OemToCharBuffA PeekMessageA PostMessageA RegisterClassExA SendDlgItemMessageA SendMessageA SetDlgItemTextA SetFocus SetMenu SetWindowLongA SetWindowPos SetWindowTextA ShowWindow TranslateMessage UpdateWindow WaitForInputIdle wsprintfA wvsprintfA

ole32

CLSIDFromString CoCreateInstance CreateStreamOnHGlobal OleInitialize OleUninitialize