jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]9de7fd611cd8d519526d8abb3f7fce6a

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.9de7fd611cd8d519526d8abb3f7fce6a
Size 61KB
Sample261009-vewpascg55
SHA256 6ee64531f46db43ea2c6badbcf7b40099671a6b7ea78484b54be59f935d34c62
MD5 9de7fd611cd8d519526d8abb3f7fce6a
SHA1 d8bf3f797a8e09cdb04fd96e53a6acc90dad4a0f
SHA512 a619cf997d93329b16b01a70e46cb9c33791d96a813f2a0b2158371e6ad81d8b43d32edb3e650132f3e97f488b45f5c8bfdfe0f5d924d4ef45deb0d8bc8e487d
SSDEEP 1536:M+3zecvaTfCGwhq8cTS9Cu/d1Wh+I5anF4gvPlfJCW+ZS57fA:HKWaT6jhqW9CYdm+I5eFvNfJCFKfA
TLSH
T195539CCFB45004BBE48A87F505F27F86F93964000235BA0D6BB66EAD96314F0FCA2975
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.9de7fd611cd8d519526d8abb3f7fce6a

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.9de7fd611cd8d519526d8abb3f7fce6a

.exe 61KB

jaffacakes118_HEUR.Trojan.Win32.Generic.9de7fd611cd8d519526d8abb3f7fce6a

IMPHASH de6afd9c76b9bd30421fe3e4a21bf868
SHA256 6ee64531f46db43ea2c6badbcf7b40099671a6b7ea78484b54be59f935d34c62
MD5 9de7fd611cd8d519526d8abb3f7fce6a
SHA1 d8bf3f797a8e09cdb04fd96e53a6acc90dad4a0f
SHA512 a619cf997d93329b16b01a70e46cb9c33791d96a813f2a0b2158371e6ad81d8b43d32edb3e650132f3e97f488b45f5c8bfdfe0f5d924d4ef45deb0d8bc8e487d
SSDEEP 1536:M+3zecvaTfCGwhq8cTS9Cu/d1Wh+I5anF4gvPlfJCW+ZS57fA:HKWaT6jhqW9CYdm+I5eFvNfJCFKfA
TLSH
T195539CCFB45004BBE48A87F505F27F86F93964000235BA0D6BB66EAD96314F0FCA2975
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

22381

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVersion ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue GetLastError GetCommandLineA HeapDestroy VirtualFree HeapFree RtlUnwind WriteFile InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP VirtualAlloc HeapReAlloc GetProcAddress LoadLibraryA MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetStartupInfoA GetModuleHandleA HeapAlloc HeapCreate AddAtomA FindAtomA AddConsoleAliasA DeleteAtom

user32

CheckDlgButton CharLowerA GetDesktopWindow CharPrevA CharNextA CheckRadioButton CheckMenuRadioItem CharUpperA CheckMenuItem

shlwapi

StrStrIA StrSpnA StrStrA UrlIsOpaqueA

gdi32

SetTextAlign SelectObject RealizePalette ResizePalette StartPage GetDCPenColor SelectPalette UnrealizeObject

d3d8

Direct3DCreate8

shell32

ord66 ord152 DragFinish ord153 ord680 ord240

Sharing