jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]d8c1a239ab430d20b6d56d0830558c5c

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.d8c1a239ab430d20b6d56d0830558c5c
Size 700KB
Sample261009-vkp4ps1vbw
SHA256 294982d9254ce9453e1e9e4a566cdb17702fb99bbee6f59c97a18746859e8c3e
MD5 d8c1a239ab430d20b6d56d0830558c5c
SHA1 8ba4530e71b4c337944d64c6a47ff5395907f6e6
SHA512 1bad3b252bed0cfd4bb7f6687e40ec4411b91baf7f18bd850e570c03dca54aa25d2768b882bd7d9ab6d9b253016cf9c456a5baddfed7924ccba12edfb531e67c
SSDEEP 3072:F2CvdNufiDxOoBAQUJc26zvaNlNednxTUz:sCvLufMXThTaEdZw
TLSH
T186E47D2532D4C072E25725308AA5C7F25A3AFC714E759D9BBFD90B3E4F682D0CA24396
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.d8c1a239ab430d20b6d56d0830558c5c

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.d8c1a239ab430d20b6d56d0830558c5c

.exe 700KB

jaffacakes118_HEUR.Trojan.Win32.Generic.d8c1a239ab430d20b6d56d0830558c5c

IMPHASH 2eb6a0d7d221a2e5b1434e2b90adefef
SHA256 294982d9254ce9453e1e9e4a566cdb17702fb99bbee6f59c97a18746859e8c3e
MD5 d8c1a239ab430d20b6d56d0830558c5c
SHA1 8ba4530e71b4c337944d64c6a47ff5395907f6e6
SHA512 1bad3b252bed0cfd4bb7f6687e40ec4411b91baf7f18bd850e570c03dca54aa25d2768b882bd7d9ab6d9b253016cf9c456a5baddfed7924ccba12edfb531e67c
SSDEEP 3072:F2CvdNufiDxOoBAQUJc26zvaNlNednxTUz:sCvLufMXThTaEdZw
TLSH
T186E47D2532D4C072E25725308AA5C7F25A3AFC714E759D9BBFD90B3E4F682D0CA24396
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31748

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetWindowsDirectoryA GetModuleFileNameA GetModuleHandleA ExitProcess CloseHandle WriteFile CreateFileA GetTempPathA CreateThread GetTickCount ExitThread GlobalUnlock GlobalLock GlobalAlloc InterlockedDecrement GetVersionExA GetLocaleInfoA lstrcmpiA ExpandEnvironmentStringsA GetCurrentDirectoryA CreateMutexA SetErrorMode GetStdHandle IsValidCodePage GetOEMCP LocalFree CreateFileW SetStdHandle WriteConsoleW LoadLibraryW GetFileAttributesA SetFileAttributesA CopyFileA GetLastError Sleep IsValidLocale EnumSystemLocalesA GetUserDefaultLCID HeapReAlloc GetStringTypeW GetACP IsProcessorFeaturePresent GetProcAddress GetModuleFileNameW SetFilePointer ReadFile FlushFileBuffers GetConsoleMode GetConsoleCP HeapSize GetLocaleInfoW GetCurrentProcessId QueryPerformanceCounter GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetCurrentThreadId HeapCreate InterlockedIncrement EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapAlloc GetSystemTimeAsFileTime GetCommandLineA HeapSetInformation GetStartupInfoW HeapFree WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError

user32

OpenClipboard VkKeyScanA EmptyClipboard SetFocus SetForegroundWindow keybd_event CloseClipboard ShowWindow SetClipboardData

advapi32

RegSetValueExA RegCloseKey RegCreateKeyExA

shell32

ShellExecuteA

ole32

CoInitialize CoCreateInstance CoUninitialize

oleaut32

VariantClear SysFreeString SysAllocString VariantInit

ws2_32

send WSAStartup select sendto inet_addr connect socket htons recv closesocket gethostbyname WSACleanup

urlmon

URLDownloadToFileA

shlwapi

PathRemoveFileSpecA