jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]fb78a23a5527ed19b41b03643e23eae4

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.fb78a23a5527ed19b41b03643e23eae4
Size 374KB
Sample261009-vphv7ada25
SHA256 a2b0855751a7b3ceb84e7dd884593df1a7c4ae918ca8e1b7078df305b3c4ce66
MD5 fb78a23a5527ed19b41b03643e23eae4
SHA1 85d8b581b8a35fc6ffe261ea64f8ec8185e54912
SHA512 4bf2dcc679d9456abd7bb82dd21b9862cce69dca0ab3d7f9bc07c8dbfd3e900d519e09071d7f18bed46542bb7bfdcd8ecaf3f502deaed8707990e762f12a93ab
SSDEEP 6144:sqlZcOt2UaFbYbGDMsrrwJ5ckQ+Zehv6dlalVjjgbAIvXlYbk2E4acu:sOmblMsrrwvmDhv6EVjMb7vH2laB
TLSH
T18784CF2394A2E728D27D32F151668EBCD0B72E76295CCD29A1F472F6A9F10B3EC0454D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.fb78a23a5527ed19b41b03643e23eae4

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.fb78a23a5527ed19b41b03643e23eae4

.exe 374KB

jaffacakes118_HEUR.Trojan.Win32.Generic.fb78a23a5527ed19b41b03643e23eae4

IMPHASH e4e2358a53edc26fa2c661ea8a7ac555
SHA256 a2b0855751a7b3ceb84e7dd884593df1a7c4ae918ca8e1b7078df305b3c4ce66
MD5 fb78a23a5527ed19b41b03643e23eae4
SHA1 85d8b581b8a35fc6ffe261ea64f8ec8185e54912
SHA512 4bf2dcc679d9456abd7bb82dd21b9862cce69dca0ab3d7f9bc07c8dbfd3e900d519e09071d7f18bed46542bb7bfdcd8ecaf3f502deaed8707990e762f12a93ab
SSDEEP 6144:sqlZcOt2UaFbYbGDMsrrwJ5ckQ+Zehv6dlalVjjgbAIvXlYbk2E4acu:sOmblMsrrwvmDhv6EVjMb7vH2laB
TLSH
T18784CF2394A2E728D27D32F151668EBCD0B72E76295CCD29A1F472F6A9F10B3EC0454D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

177270

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GlobalFree VirtualAlloc GlobalAlloc GetFileSize GetModuleHandleW LocalAlloc WriteFile CreateFileA SetFilePointer ReadFile Sleep FindClose GetLastError FindNextFileA FreeLibrary EndUpdateResourceA UpdateResourceA SizeofResource BeginUpdateResourceA LockResource LoadResource MapViewOfFile FlushViewOfFile CreateFileMappingA CopyFileA FreeResource VirtualProtect GetProcAddress GetTempPathA GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar GetOEMCP GetACP GetCPInfo HeapReAlloc RtlUnwind HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings WideCharToMultiByte FreeEnvironmentStringsW GetStringTypeW FreeEnvironmentStringsA GetModuleFileNameA UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetVersion GetCommandLineA GetStartupInfoA GetModuleHandleA CreateMutexA VirtualFree GetProcessHeap HeapAlloc ExitProcess CreateThread CloseHandle HeapFree SetLastError WaitForMultipleObjects

user32

CreateWindowExA UpdateWindow LoadIconA LoadCursorA RegisterClassExA GetIconInfo ShowWindow MoveWindow GetWindowLongA GetDC PostQuitMessage EndPaint DrawTextA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA LoadAcceleratorsA IsWindow IsWindowVisible LoadImageA CopyImage ReleaseDC DestroyIcon CreateIconIndirect CreateDialogParamA EndDialog LoadStringA DialogBoxParamA DestroyWindow DefWindowProcA BeginPaint GetClientRect DrawIcon

gdi32

Rectangle SelectObject EnumObjects CreatePen CreateSolidBrush CreateDCA GetObjectA GetDIBits CreateCompatibleBitmap DeleteObject

ole32

CoUninitialize CoInitialize

pdh

PdhCollectQueryData PdhAddCounterA PdhOpenQueryA