jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]e8b69f36d907a2c38b2c8186740e0b17

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.e8b69f36d907a2c38b2c8186740e0b17
Size 61KB
Sample261009-vm4d4sch82
SHA256 3352169cf8d911e7e6a65863119226c76b04d52aee6844b372925e5e1d27a3c5
MD5 e8b69f36d907a2c38b2c8186740e0b17
SHA1 9a784e64bc1597a312acc622c34fd1f5daaefcbd
SHA512 b72db65f07a65e1a832815a9a9c5a920669b1f249e78950dd4d0818d20c6e64cf0ac9e2465e179839eb2192d79f8bda11b450e8adab506fce9a2124d925c39ff
SSDEEP 768:mVrs8dPQcluS2ycYB6IT1YQEY+yF5LZNGy72d1UhlySvP+qhtSZ7Bfdocyyt:EdLuSxFBxT1YLY3YGKuau2qhtYBfKcyY
TLSH
T110538DCBB71498F3C0E702305E913A2B557B2C749D59ACA6DB71B08A7DB10A4E039F57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.e8b69f36d907a2c38b2c8186740e0b17

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.e8b69f36d907a2c38b2c8186740e0b17

.dll 61KB

jaffacakes118_HEUR.Trojan.Win32.Generic.e8b69f36d907a2c38b2c8186740e0b17

IMPHASH 629f428179b9bf1ea9abe3a9351ea13d
SHA256 3352169cf8d911e7e6a65863119226c76b04d52aee6844b372925e5e1d27a3c5
MD5 e8b69f36d907a2c38b2c8186740e0b17
SHA1 9a784e64bc1597a312acc622c34fd1f5daaefcbd
SHA512 b72db65f07a65e1a832815a9a9c5a920669b1f249e78950dd4d0818d20c6e64cf0ac9e2465e179839eb2192d79f8bda11b450e8adab506fce9a2124d925c39ff
SSDEEP 768:mVrs8dPQcluS2ycYB6IT1YQEY+yF5LZNGy72d1UhlySvP+qhtSZ7Bfdocyyt:EdLuSxFBxT1YLY3YGKuau2qhtYBfKcyY
TLSH
T110538DCBB71498F3C0E702305E913A2B557B2C749D59ACA6DB71B08A7DB10A4E039F57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2137091

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

Process32Next Process32First GetFileSize CreateFileA GetModuleFileNameA GetModuleHandleA WideCharToMultiByte MultiByteToWideChar FindClose FindFirstFileA VirtualFreeEx WaitForSingleObject CreateRemoteThread WriteProcessMemory VirtualAllocEx GetTempPathA ReleaseMutex GetLastError CreateMutexA OpenProcess Sleep DeleteFileA GetLocalTime ReadFile SetFilePointer ReadProcessMemory VirtualQueryEx VirtualAlloc SetThreadPriority CreateThread CopyFileA GetTickCount GetPrivateProfileStringA ExitProcess TerminateProcess GetCurrentProcess WritePrivateProfileStringA ResumeThread CreateProcessA VirtualFree lstrcmpiA SetUnhandledExceptionFilter LoadLibraryA GetProcAddress HeapAlloc GetProcessHeap VirtualProtect CreateToolhelp32Snapshot GetCurrentProcessId CloseHandle

user32

FindWindowA PostMessageA IsWindowVisible GetWindowRect ReleaseDC GetWindowTextW GetForegroundWindow GetClassNameW GetWindow wsprintfA GetDC

gdi32

CreateDCA GetDeviceCaps CreateCompatibleDC CreateCompatibleBitmap SelectObject DeleteDC DeleteObject BitBlt

advapi32

OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges

msvcrt

wcscpy wcslen strstr wcsncat _strcmpi wcsstr _vsnprintf rand srand strrchr _strlwr _strupr wcscat mbstowcs ??2@YAPAXI@Z memset memcpy _except_handler3 strcat strlen _itoa _stricmp free malloc strchr sprintf strncpy isspace isalnum atoi strcpy ??3@YAXPAX@Z wcscmp

wsock32

shutdown closesocket

gdiplus

GdiplusStartup GdipCreateBitmapFromHBITMAP GdipDisposeImage GdiplusShutdown GdipGetImageEncodersSize GdipGetImageEncoders GdipSaveImageToFile