jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]b6374b73a15b0ee28c18b744e21b4b64

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.b6374b73a15b0ee28c18b744e21b4b64
Size 100KB
Sample261011-1a2yeahb89
SHA256 6eafda552da32dddd1f020fbc59461b9fbba020936e4a1a77b2d321a4dfc76bd
MD5 b6374b73a15b0ee28c18b744e21b4b64
SHA1 8f73cdaaf01cc11c69d3e98b26c58f9bf63674cf
SHA512 c1c51815129a639dd5d0103e6d6d733ec23d56a834dfe311027e36066a1b780222a394b70cefc9f0189cff0803073b053ab8bf2ef80d0c542e7524b34d3b63e6
SSDEEP 1536:i96b4F1Qvca6Fq6Ix/Jo8eNFlPcM74vyHL9pqBAlFbxhe1GPygnUovpRzT:iw0F1QvgF7IxhDeahvyHL7ByIUo7
TLSH
T105A3CFA0BCC4C152D1D24631E8B5CFF6162B6D7AC702269372A8BE6B3E332E54527D53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.b6374b73a15b0ee28c18b744e21b4b64

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.b6374b73a15b0ee28c18b744e21b4b64

.exe 100KB

jaffacakes118_HEUR.Trojan.Win32.Generic.b6374b73a15b0ee28c18b744e21b4b64

IMPHASH 32b9c847f0e16d9bb324107d7a319a7b
SHA256 6eafda552da32dddd1f020fbc59461b9fbba020936e4a1a77b2d321a4dfc76bd
MD5 b6374b73a15b0ee28c18b744e21b4b64
SHA1 8f73cdaaf01cc11c69d3e98b26c58f9bf63674cf
SHA512 c1c51815129a639dd5d0103e6d6d733ec23d56a834dfe311027e36066a1b780222a394b70cefc9f0189cff0803073b053ab8bf2ef80d0c542e7524b34d3b63e6
SSDEEP 1536:i96b4F1Qvca6Fq6Ix/Jo8eNFlPcM74vyHL9pqBAlFbxhe1GPygnUovpRzT:iw0F1QvgF7IxhDeahvyHL7ByIUo7
TLSH
T105A3CFA0BCC4C152D1D24631E8B5CFF6162B6D7AC702269372A8BE6B3E332E54527D53
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

63867

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress GetModuleHandleA VirtualAlloc FindResourceA GetCommandLineA CloseHandle WriteFile GetLastError CreateFileA lstrcatA GetTempPathA VirtualProtect CreateFileW GetFileSize SystemTimeToFileTime DeleteFileA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar LoadLibraryA HeapReAlloc HeapAlloc GetOEMCP GetACP GetCPInfo RtlUnwind HeapFree VirtualFree HeapCreate HeapDestroy GetStringTypeW GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings WideCharToMultiByte GetStartupInfoA GetVersion ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW

user32

LoadStringA DefWindowProcA DestroyWindow DialogBoxParamA BeginPaint DrawTextA EndPaint PostQuitMessage EndDialog wsprintfA CreateWindowExA ShowWindow UpdateWindow LoadIconA LoadCursorA RegisterClassExA LoadAcceleratorsA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA GetClientRect

Sharing