jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]d2efc8db78591966cdaefb747dcdf779

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.d2efc8db78591966cdaefb747dcdf779
Size 119KB
Sample261009-vkan1sch53
SHA256 2c8af6ee5e5536b6406a21ea2ac4dce0a768872fca4300ae5bab2aab2ac9daed
MD5 d2efc8db78591966cdaefb747dcdf779
SHA1 510e41badc77c7edcc651cac958a75818e171f70
SHA512 a1c1006a38531350ba88326bc59d4614a0687ee675a4698ba34f5ec6da4d13c09c430e24ec089afd8179c3381041033b9e7d5ae61603d243703d034f5eac9069
SSDEEP 3072:LYP2XerzhOUxu/XUtauE8zycEMB2hUYFT:Lu2urzh9xu/XkauJzVEcO
TLSH
T1E5C3C01337E1807AE56161307EBD3375E2B4FD30A67AE50EE7A11A0F7B70691851AB13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.d2efc8db78591966cdaefb747dcdf779

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.d2efc8db78591966cdaefb747dcdf779

.exe 119KB

jaffacakes118_HEUR.Trojan.Win32.Generic.d2efc8db78591966cdaefb747dcdf779

IMPHASH 9402b48d966c911f0785b076b349b5ef
SHA256 2c8af6ee5e5536b6406a21ea2ac4dce0a768872fca4300ae5bab2aab2ac9daed
MD5 d2efc8db78591966cdaefb747dcdf779
SHA1 510e41badc77c7edcc651cac958a75818e171f70
SHA512 a1c1006a38531350ba88326bc59d4614a0687ee675a4698ba34f5ec6da4d13c09c430e24ec089afd8179c3381041033b9e7d5ae61603d243703d034f5eac9069
SSDEEP 3072:LYP2XerzhOUxu/XUtauE8zycEMB2hUYFT:Lu2urzh9xu/XkauJzVEcO
TLSH
T1E5C3C01337E1807AE56161307EBD3375E2B4FD30A67AE50EE7A11A0F7B70691851AB13
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42929

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

comctl32

ord17

kernel32

DeleteFileA DeleteFileW CreateDirectoryA CreateDirectoryW FindClose FindNextFileA FindFirstFileA FindNextFileW FindFirstFileW GetTickCount WideCharToMultiByte MultiByteToWideChar GetVersionExA GlobalAlloc lstrlenA GetModuleFileNameA FindResourceA GetModuleHandleA HeapAlloc GetProcessHeap HeapFree HeapReAlloc CompareStringA ExitProcess GetLocaleInfoA GetNumberFormatA lstrcmpiA GetProcAddress GetDateFormatA GetTimeFormatA FileTimeToSystemTime FileTimeToLocalFileTime ExpandEnvironmentStringsA WaitForSingleObject SetCurrentDirectoryA Sleep GetTempPathA MoveFileExA UnmapViewOfFile GetCommandLineA MapViewOfFile CreateFileMappingA GetModuleFileNameW SetEnvironmentVariableA OpenFileMappingA LocalFileTimeToFileTime SystemTimeToFileTime GetSystemTime IsDBCSLeadByte GetCPInfo FreeLibrary LoadLibraryA GetCurrentDirectoryA GetFullPathNameA SetFileAttributesW SetFileAttributesA GetFileAttributesW GetFileAttributesA WriteFile SetLastError GetStdHandle ReadFile CreateFileW CreateFileA GetFileType SetEndOfFile SetFilePointer MoveFileA SetFileTime GetCurrentProcess CloseHandle GetLastError DosDateTimeToFileTime

user32

ReleaseDC GetDC SendMessageA wsprintfA SetDlgItemTextA EndDialog DestroyIcon SendDlgItemMessageA GetDlgItemTextA DialogBoxParamA IsWindowVisible WaitForInputIdle GetSysColor PostMessageA SetMenu SetFocus LoadBitmapA LoadIconA CharToOemA OemToCharA GetClassNameA CharUpperA GetWindowRect GetParent MapWindowPoints CreateWindowExA UpdateWindow SetWindowTextA LoadCursorA RegisterClassExA SetWindowLongA GetWindowLongA DefWindowProcA PeekMessageA GetMessageA TranslateMessage DispatchMessageA GetClientRect CopyRect IsWindow MessageBoxA ShowWindow GetDlgItem EnableWindow FindWindowExA wvsprintfA CharToOemBuffA LoadStringA SetWindowPos GetWindowTextA GetWindow GetSystemMetrics OemToCharBuffA DestroyWindow

gdi32

GetDeviceCaps GetObjectA CreateCompatibleBitmap SelectObject StretchBlt CreateCompatibleDC DeleteObject DeleteDC

comdlg32

GetSaveFileNameA CommDlgExtendedError GetOpenFileNameA

advapi32

LookupPrivilegeValueA RegOpenKeyExA RegQueryValueExA RegCreateKeyExA RegSetValueExA RegCloseKey SetFileSecurityW SetFileSecurityA OpenProcessToken AdjustTokenPrivileges

shell32

ShellExecuteExA SHFileOperationA SHGetFileInfoA SHGetSpecialFolderLocation SHGetMalloc SHBrowseForFolderA SHGetPathFromIDListA SHChangeNotify

ole32

CreateStreamOnHGlobal OleInitialize CoCreateInstance OleUninitialize CLSIDFromString

oleaut32

VariantInit