jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]a4c014bf31f73257f60652143d35bef9

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.a4c014bf31f73257f60652143d35bef9
Size 263KB
Sample261009-vfjfcscg66
SHA256 21e3c160be6448e02f19df4034b1b0b1a035cd952a59c6c694a2acfeab1c0105
MD5 a4c014bf31f73257f60652143d35bef9
SHA1 155a053e7c7de51a53685a51d106a5c1eb9a0317
SHA512 273a994ec0c4fac73aa819c543cb29f415ae706dd7da7211ddd1b9f4416ad0decaea255dea9fdb37f716ad75d624a99134c9043398f08c6b87acedd926224e68
SSDEEP 6144:Kd16R9dkSnt/iRCw8C5AUlwkpf/DZLH6Mzfr3Bi1LeS5i:Q25t0GsB6Mf01
TLSH
T129448D2973A2C032E6A36035594AD3B295AD76305CA5928BB7D04F3E9F343E1D72770B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.a4c014bf31f73257f60652143d35bef9

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.a4c014bf31f73257f60652143d35bef9

.exe 263KB

jaffacakes118_HEUR.Trojan.Win32.Generic.a4c014bf31f73257f60652143d35bef9

IMPHASH e9779dc0810b99c9ebbe6549388bc6cf
SHA256 21e3c160be6448e02f19df4034b1b0b1a035cd952a59c6c694a2acfeab1c0105
MD5 a4c014bf31f73257f60652143d35bef9
SHA1 155a053e7c7de51a53685a51d106a5c1eb9a0317
SHA512 273a994ec0c4fac73aa819c543cb29f415ae706dd7da7211ddd1b9f4416ad0decaea255dea9fdb37f716ad75d624a99134c9043398f08c6b87acedd926224e68
SSDEEP 6144:Kd16R9dkSnt/iRCw8C5AUlwkpf/DZLH6Mzfr3Bi1LeS5i:Q25t0GsB6Mf01
TLSH
T129448D2973A2C032E6A36035594AD3B295AD76305CA5928BB7D04F3E9F343E1D72770B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

153968

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wsock32

ioctlsocket inet_addr gethostbyname htons socket WSAStartup connect send WSACleanup closesocket recv

advapi32

RegOpenKeyA RegSetValueExA RegCloseKey

kernel32

FindClose FindFirstFileA GetFullPathNameA CreateFileA GlobalFlags GetLocaleInfoA GetCPInfo GetOEMCP FileTimeToLocalFileTime GetCurrentDirectoryA HeapFree HeapAlloc RtlUnwind GetSystemTimeAsFileTime GetDriveTypeA ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess RaiseException GetStartupInfoA VirtualAlloc HeapReAlloc HeapSize HeapCreate VirtualFree GetStdHandle GetConsoleCP GetConsoleMode SetHandleCount GetFileType InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetACP IsValidCodePage GetTimeZoneInformation SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetProcessHeap CompareStringW SetEnvironmentVariableA SetEndOfFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom LoadLibraryA lstrcmpW GetVersionExA FileTimeToSystemTime lstrcmpA GlobalGetAtomNameA InterlockedIncrement GetModuleHandleW CompareStringA GetCurrentThreadId FormatMessageA MultiByteToWideChar lstrlenA GetCurrentProcessId FreeLibrary WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource InterlockedDecrement GetModuleHandleA GetProcAddress TlsFree GlobalFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalAlloc GlobalHandle GlobalUnlock GlobalReAlloc GlobalLock EnterCriticalSection TlsGetValue LeaveCriticalSection LocalFree LocalAlloc GetLastError SetLastError GetCommandLineA SetFileAttributesA CopyFileA GetEnvironmentVariableA CreateProcessA GetTempPathA GetTickCount GetModuleFileNameA Sleep CreateToolhelp32Snapshot Process32First OpenProcess TerminateProcess CloseHandle Process32Next IsDebuggerPresent CreateDirectoryA

user32

PostQuitMessage GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu ClientToScreen SetWindowTextA RegisterWindowMessageA LoadIconA WinHelpA GetCapture GetClassLongA GetClassNameA GetPropA RemovePropA IsWindow GetForegroundWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow GetClientRect PostMessageA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus ModifyMenuA EnableMenuItem SetPropA CheckMenuItem GetWindowTextA LoadCursorA GetSystemMetrics GetDC ReleaseDC GetSysColor GetSysColorBrush SetWindowsHookExA CallNextHookEx DispatchMessageA GetKeyState PeekMessageA ValidateRect GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetWindowThreadProcessId SendMessageA GetParent GetWindowLongA GetLastActivePopup IsWindowEnabled EnableWindow UnhookWindowsHookEx MessageBoxA

gdi32

Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC GetStockObject RectVisible GetDeviceCaps PtVisible SetMapMode RestoreDC SaveDC ExtTextOutA DeleteObject SetBkColor SetTextColor GetClipBox CreateBitmap TextOutA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

oleaut32

VariantInit VariantClear VariantChangeType

oleacc

CreateStdAccessibleObject LresultFromObject