jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]fc60fe4743865b0fe28b313e5691e1b9

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.fc60fe4743865b0fe28b313e5691e1b9
Size 308KB
Sample261009-vppczada27
SHA256 8b08e39eaed09e5461cc105abd97f031cf74d8e3b759cdd1933626ba95847a3c
MD5 fc60fe4743865b0fe28b313e5691e1b9
SHA1 7b5b8942bc66fc0b23583ba5440bbe7d54711400
SHA512 5a25bebbb1779706d23fdc2c25740cc2db4340121b55239eb92eeda05c53a555d1f7915d1ed3a405e7e0c8074196e82b8156ee8716f204a5f38d7d09def9fb90
SSDEEP 3072:Jb1jkNuet1umvFgQDMvoBreteIF3esf10X3hTlOgKIdQv6UBk5cREBJ93hiEpJTH:JBjkNvumOQDHIF3eQaToBWku5cexPvB
TLSH
T17264390236A08935D3A3137689D3D79562B6AD792E71C28FE2903F2D99342C7673335E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.fc60fe4743865b0fe28b313e5691e1b9

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.fc60fe4743865b0fe28b313e5691e1b9

.exe 308KB

jaffacakes118_HEUR.Trojan.Win32.Generic.fc60fe4743865b0fe28b313e5691e1b9

IMPHASH 53f0f6795cf9dd37023c6589721b1b1b
SHA256 8b08e39eaed09e5461cc105abd97f031cf74d8e3b759cdd1933626ba95847a3c
MD5 fc60fe4743865b0fe28b313e5691e1b9
SHA1 7b5b8942bc66fc0b23583ba5440bbe7d54711400
SHA512 5a25bebbb1779706d23fdc2c25740cc2db4340121b55239eb92eeda05c53a555d1f7915d1ed3a405e7e0c8074196e82b8156ee8716f204a5f38d7d09def9fb90
SSDEEP 3072:Jb1jkNuet1umvFgQDMvoBreteIF3esf10X3hTlOgKIdQv6UBk5cREBJ93hiEpJTH:JBjkNvumOQDHIF3eQaToBWku5cexPvB
TLSH
T17264390236A08935D3A3137689D3D79562B6AD792E71C28FE2903F2D99342C7673335E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

102582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\JinZQ\Hook开机启动\sttray-setup\Release\sttray.pdb

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

wininet

InternetReadFile InternetOpenUrlA InternetCloseHandle InternetOpenA InternetGetConnectedState HttpQueryInfoA

winmm

timeGetTime

kernel32

GetFileSize DuplicateHandle GetCurrentProcess FindClose FindFirstFileA GetVolumeInformationA GetFullPathNameA SetErrorMode FileTimeToLocalFileTime GetFileAttributesA GetFileTime ExitProcess RtlUnwind HeapAlloc HeapFree VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery SetEndOfFile GetStartupInfoA GetCommandLineA HeapReAlloc HeapSize QueryPerformanceCounter GetCurrentProcessId HeapDestroy HeapCreate VirtualFree IsBadWritePtr GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetTimeZoneInformation SetStdHandle IsBadReadPtr IsBadCodePtr SetEnvironmentVariableA UnlockFile LockFile FlushFileBuffers RaiseException GetOEMCP GetCPInfo InterlockedIncrement GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc FileTimeToSystemTime InterlockedDecrement GetCurrentThread lstrcmpA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA SetLastError GlobalFree MulDiv GlobalAlloc GlobalLock GlobalUnlock FormatMessageA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcatA lstrcmpW lstrcpynA GetModuleHandleA LocalFree CreateThread LoadLibraryA GetProcAddress FreeLibrary CreateMutexA GetPrivateProfileStringA WritePrivateProfileStringA OpenProcess GetPriorityClass TerminateProcess CreateToolhelp32Snapshot Process32First Process32Next FindResourceA LoadResource LockResource SizeofResource GetModuleFileNameA CopyFileA CreateProcessA CompareStringW CompareStringA lstrcmpiA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange WriteFile CreateFileA ReadFile SetFilePointer CloseHandle BeginUpdateResourceA UpdateResourceA EndUpdateResourceA CreateDirectoryA GetTickCount Sleep MoveFileExA lstrlenA DeleteFileA GetSystemTimeAsFileTime

user32

RegisterClipboardFormatA PostThreadMessageA ReleaseCapture SetCapture CharNextA LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu SetWindowContextHelpId MapDialogRect wsprintfA GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetMessageA TranslateMessage GetActiveWindow GetCursorPos ValidateRect SetCursor PostQuitMessage SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA GetFocus IsWindow SetFocus IsChild GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints MessageBoxA GetKeyState SetForegroundWindow IsWindowVisible GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx GetParent EqualRect GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA MessageBeep GetNextDlgGroupItem InvalidateRgn GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect CopyRect PtInRect GetWindow GetSystemMetrics InvalidateRect CopyAcceleratorTableA SetRect IsRectEmpty LoadIconA GetClientRect IsIconic GetSystemMenu SendMessageA AppendMenuA DrawIcon CharUpperA GetIconInfo EnableWindow SendDlgItemMessageA UpdateWindow SetDlgItemTextA RemovePropA

gdi32

ExtSelectClipRgn GetStockObject PtVisible GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode GetWindowExtEx GetViewportExtEx ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA GetDeviceCaps CreateBitmap SetBkColor SetTextColor GetClipBox DeleteObject CreateCompatibleDC GetDIBits DeleteDC GetObjectA SetMapMode RestoreDC SaveDC ExtTextOutA RectVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegEnumValueA RegOpenKeyExA RegOpenKeyA RegQueryValueExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

shell32

SHGetSpecialFolderPathA ShellExecuteA ExtractIconA

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoGetClassObject CoTaskMemFree CoTaskMemAlloc CLSIDFromProgID CLSIDFromString CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes

oleaut32

VariantClear SafeArrayDestroy VariantCopy SysAllocStringByteLen SysStringLen SysAllocStringLen SysFreeString VariantInit VariantChangeType SysAllocString SystemTimeToVariantTime OleCreateFontIndirect