jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]e19b3cf0449e4870da5b30629f73d258

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.e19b3cf0449e4870da5b30629f73d258
Size 269KB
Sample261009-vmf9ksch68
SHA256 68cb8c489a795d934c61ccd676d8e189aed0a852e0460d394c97703bab7ccf7f
MD5 e19b3cf0449e4870da5b30629f73d258
SHA1 ea5e519d213cd9ddb3c476cbda102d0b3c255772
SHA512 30b1187c6befcc25e58f040d3edcf4437946880a85b4748426e07fe7f53bce5fda2536877cfb84b65a7dd7c0605823d0cd66f7a3d9a373dbed32a38ee4875404
SSDEEP 3072:JbLiOqyJY2xeM111+8R1zdX1JieL6kTPQdOxBVl3ddAWcBX5:BEV4eM13pRHX51V5dCRB
TLSH
T160444C01FE90C032D4C224724E19C7B5897E7871276A69CBBBC81A795F386D1EAF530E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.e19b3cf0449e4870da5b30629f73d258

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.e19b3cf0449e4870da5b30629f73d258

.exe 269KB

jaffacakes118_HEUR.Trojan.Win32.Generic.e19b3cf0449e4870da5b30629f73d258

IMPHASH 20da7752046a56b1d34a33d5e52832f0
SHA256 68cb8c489a795d934c61ccd676d8e189aed0a852e0460d394c97703bab7ccf7f
MD5 e19b3cf0449e4870da5b30629f73d258
SHA1 ea5e519d213cd9ddb3c476cbda102d0b3c255772
SHA512 30b1187c6befcc25e58f040d3edcf4437946880a85b4748426e07fe7f53bce5fda2536877cfb84b65a7dd7c0605823d0cd66f7a3d9a373dbed32a38ee4875404
SSDEEP 3072:JbLiOqyJY2xeM111+8R1zdX1JieL6kTPQdOxBVl3ddAWcBX5:BEV4eM13pRHX51V5dCRB
TLSH
T160444C01FE90C032D4C224724E19C7B5897E7871276A69CBBBC81A795F386D1EAF530E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

52510

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mmp\module\setup\atlexe\out.pdb

shell32

ShellExecuteA

ole32

CoInitialize

oleaut32

SysFreeString

kernel32

TerminateThread WaitForSingleObject CreateThread GetFileAttributesExA ExpandEnvironmentStringsA lstrlenA lstrcatA lstrcpyA SetLastError GetLastError CreateRemoteThread GetProcAddress GetExitCodeProcess CloseHandle GetCurrentProcess GetModuleHandleA CreateMutexA MoveFileA RemoveDirectoryA DeleteFileA CreateDirectoryA GetTempPathA GetCommandLineA GetModuleFileNameA Sleep GetLocalTime GetTickCount WriteFile ReadFile GetTimeZoneInformation GetLocaleInfoW CompareStringA CompareStringW DuplicateHandle RaiseException GetProcessHeap SetEndOfFile LoadLibraryA InterlockedExchange FreeLibrary SetConsoleCtrlHandler IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle SetFilePointer RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetEnvironmentVariableA GetStartupInfoA HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCurrentThread EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA MultiByteToWideChar LCMapStringW HeapAlloc HeapSize ExitProcess GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA VirtualAlloc HeapReAlloc

advapi32

RegDeleteValueA RegOpenKeyExA RegQueryValueExA RegCreateKeyExA RegSetValueExA RegCloseKey RegOpenKeyA

user32

wsprintfA

shlwapi

PathRemoveBlanksA PathFileExistsA PathIsDirectoryA PathGetArgsA PathFindFileNameA

ws2_32

send closesocket gethostbyname select connect recv __WSAFDIsSet htons socket WSAStartup ioctlsocket

netapi32

Netbios