jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]b13124cef4bb3fcd22ff1aa2281906c8

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.b13124cef4bb3fcd22ff1aa2281906c8
Size 180KB
Sample261011-1akdcsds3v
SHA256 6c9dd81326c44be3e39a9df182b918671d47e8307554e1c75eea119967ea2de0
MD5 b13124cef4bb3fcd22ff1aa2281906c8
SHA1 ec673e37ec248da285edace74adece4ec53e8fe9
SHA512 81b4dd118e3a60aa3fd2a5b15d1b312d882f3dfa64074b619c09af18aa7fe8bcb00d4ebf5a037a482040838b2a65b977c09a00e5e52afd75e3dc74b9d27c363f
SSDEEP 1536:hs1DUenVguZ0ABjLpOsxD3BApm7lA1TcKVXIGnT//GviVbHj24BMk1OC3FD5Fzd4:KDU2ZZddWGARVpnxBjFVFzdWXHJf
TLSH
T1690435DA0CA1716FC2A0283275B9A76D787B3D336556CC724758AF63CC6080EDF7A462
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.b13124cef4bb3fcd22ff1aa2281906c8

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.b13124cef4bb3fcd22ff1aa2281906c8

.exe 180KB

jaffacakes118_HEUR.Trojan.Win32.Generic.b13124cef4bb3fcd22ff1aa2281906c8

IMPHASH 1e3aa2dad8e9870da7174ccd31aacb05
SHA256 6c9dd81326c44be3e39a9df182b918671d47e8307554e1c75eea119967ea2de0
MD5 b13124cef4bb3fcd22ff1aa2281906c8
SHA1 ec673e37ec248da285edace74adece4ec53e8fe9
SHA512 81b4dd118e3a60aa3fd2a5b15d1b312d882f3dfa64074b619c09af18aa7fe8bcb00d4ebf5a037a482040838b2a65b977c09a00e5e52afd75e3dc74b9d27c363f
SSDEEP 1536:hs1DUenVguZ0ABjLpOsxD3BApm7lA1TcKVXIGnT//GviVbHj24BMk1OC3FD5Fzd4:KDU2ZZddWGARVpnxBjFVFzdWXHJf
TLSH
T1690435DA0CA1716FC2A0283275B9A76D787B3D336556CC724758AF63CC6080EDF7A462
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20656

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVersionExA GetProcAddress LoadLibraryA GetLastError WideCharToMultiByte FreeLibrary Sleep TerminateProcess WaitForSingleObject CreateFileA SetFileTime GetFileAttributesExA WinExec GetModuleFileNameA GetStartupInfoA GetModuleHandleA WriteFile OpenProcess CloseHandle GetCurrentProcess DuplicateHandle GetSystemDirectoryA CreateProcessA

user32

ShowWindow RegisterClassExA CreateWindowExA DispatchMessageA GetDesktopWindow TranslateMessage GetMessageA SendMessageTimeoutA RegisterWindowMessageA GetClassNameA PostMessageA EnumChildWindows GetWindowThreadProcessId EnumWindows DefWindowProcA PostQuitMessage

advapi32

RegOpenKeyExA LookupAccountNameA GetUserNameA CloseServiceHandle CreateServiceA OpenSCManagerA DeleteService OpenServiceA RegCloseKey RegQueryValueExA StartServiceA ConvertSidToStringSidA

shell32

SHGetSpecialFolderPathA

ole32

CoInitialize CoUninitialize

oleaut32

SysFreeString VariantClear

shlwapi

SHGetValueA SHSetValueA

msvcrt

wcslen _stricmp _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit fopen fwrite fflush fclose __CxxFrameHandler strstr strchr atoi _strlwr _access sprintf ??3@YAXPAX@Z rand ??2@YAPAXI@Z srand time

dbghelp

ImageNtHeader

Name

.text

Size

20KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

120KB

Virtual Size

117KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

pdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

odata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ndata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

mdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

edata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

cdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

idata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.b13124cef4bb3fcd22ff1aa2281906c8

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

msvcrt

dbghelp

generic