jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]b2301ffbe9bdd1629720fc2a7c40764f

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.b2301ffbe9bdd1629720fc2a7c40764f
Size 423KB
Sample261009-vgrhcscg85
SHA256 712736411ce57cb4b23d705c7f5e46d311ba4bba8a7814c2819d8892c4bacaaf
MD5 b2301ffbe9bdd1629720fc2a7c40764f
SHA1 c95ebfd71f00551dec391832ac52429999a3b8ea
SHA512 216832a58925780ac7182d97f3b4d195861acad6f27ebc55d8abdb6de31a781e1a2453dba0a397feaf91fb1327ff0f59152a5fa908cfb8a5462999f503c01594
SSDEEP 6144:4Xsp57hbP7QHHMZmJ9ZspV7ZHygE50rgtnxPBs+jIbFqEY4PcMlFuTRFfJ7wfR9n:D57EHMZmJH8V9HngtxWBqcUMlyA
TLSH
T11E946C62EBA6F031E0939472367DD365A425B9303B7180C7B3C15EB9A4F1AD29636F43
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.b2301ffbe9bdd1629720fc2a7c40764f

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.b2301ffbe9bdd1629720fc2a7c40764f

.exe 423KB

jaffacakes118_HEUR.Trojan.Win32.Generic.b2301ffbe9bdd1629720fc2a7c40764f

IMPHASH d892a011478a8f3f302dbc6598a339ff
SHA256 712736411ce57cb4b23d705c7f5e46d311ba4bba8a7814c2819d8892c4bacaaf
MD5 b2301ffbe9bdd1629720fc2a7c40764f
SHA1 c95ebfd71f00551dec391832ac52429999a3b8ea
SHA512 216832a58925780ac7182d97f3b4d195861acad6f27ebc55d8abdb6de31a781e1a2453dba0a397feaf91fb1327ff0f59152a5fa908cfb8a5462999f503c01594
SSDEEP 6144:4Xsp57hbP7QHHMZmJ9ZspV7ZHygE50rgtnxPBs+jIbFqEY4PcMlFuTRFfJ7wfR9n:D57EHMZmJH8V9HngtxWBqcUMlyA
TLSH
T11E946C62EBA6F031E0939472367DD365A425B9303B7180C7B3C15EB9A4F1AD29636F43
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

73362

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MultiByteToWideChar lstrlenW GetLastError EnterCriticalSection LockResource DeleteCriticalSection CloseHandle LocalFree SetProcessAffinityMask GetFileSize SetErrorMode CreateProcessW QueryPerformanceCounter GetTickCount GetPriorityClass GetVolumeInformationA Sleep CreateProcessA ReadFile CreateFileW GetTempFileNameA Process32FirstW GetSystemInfo GetModuleFileNameA Process32NextW CreateToolhelp32Snapshot GetFileTime QueryPerformanceFrequency GetVersionExA GetWindowsDirectoryW GetTempPathA SetEvent TerminateThread GetExitCodeThread CreateEventW CreateThread GetModuleFileNameW WaitForMultipleObjects LeaveCriticalSection FormatMessageW SizeofResource WideCharToMultiByte InitializeCriticalSection WriteFile SetFileTime GetProcessHeap WaitForSingleObject HeapFree GetCurrentProcess HeapAlloc LoadResource FindResourceW FindResourceExW lstrlenA GetSystemDirectoryA HeapReAlloc FlushFileBuffers SetEndOfFile SetEnvironmentVariableW SetEnvironmentVariableA CompareStringW CompareStringA GetConsoleMode GetConsoleCP WriteConsoleW GetConsoleOutputCP WriteConsoleA CreateFileA GetExitCodeProcess SetStdHandle GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA LoadLibraryA InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale RaiseException HeapDestroy HeapSize InterlockedIncrement InterlockedDecrement VirtualProtect VirtualAlloc GetProcAddress GetModuleHandleA VirtualQuery TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteFileW GetSystemTimeAsFileTime GetLocalTime ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind GetCPInfo LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree GetStdHandle GetFileAttributesW SetHandleCount GetFileType SetFilePointer

advapi32

QueryServiceStatusEx StartServiceW ChangeServiceConfig2W OpenSCManagerW CloseServiceHandle CreateServiceW RegisterServiceCtrlHandlerW SetServiceStatus RegSetValueExW RegCloseKey RegOpenKeyExW RegQueryValueExW RegCreateKeyExW StartServiceCtrlDispatcherW

ole32

CLSIDFromProgID CoInitialize CoUninitialize CoCreateInstance StringFromCLSID

ws2_32

WSACloseEvent WSASetEvent WSAStartup getaddrinfo WSARecv WSASocketW WSASend WSAGetLastError WSAConnect WSAEnumNetworkEvents WSACleanup WSAGetOverlappedResult freeaddrinfo WSACreateEvent WSASetLastError closesocket WSAResetEvent gethostbyname WSAEventSelect

user32

UnregisterClassA