jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]ba1a5c444567cae813f709865ae654ee

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.ba1a5c444567cae813f709865ae654ee
Size 139KB
Sample261011-1bd8qsft4p
SHA256 833f43c1e0e4f706ddd75fb8684d085a8684bb99438d69bcd132e0eaca5460e3
MD5 ba1a5c444567cae813f709865ae654ee
SHA1 91b7de94a2743ed9320fc31d765734325438006e
SHA512 8ce08a0e87a71f6f22e523645aaec3d5032a3c25fac2d621a8ecbace00c7b35f3fc9ef2c525adec81da9e6f4584208aec484dcbce97830740c4ee37def49d940
SSDEEP 3072:/80xyzMuFd4mvxJJXwsxlKVr8N3wtmMz1xamnpdW79QuUh9W:U0xyzzUWJXwsxgw0z1xRpdWx1y
TLSH
T17FD3022CF6514AD6C0E70EBE2704E6315EBA5A34C4C482DB6FC529CACA662B4CD47F03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.ba1a5c444567cae813f709865ae654ee

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.ba1a5c444567cae813f709865ae654ee

.dll 139KB

jaffacakes118_HEUR.Trojan.Win32.Generic.ba1a5c444567cae813f709865ae654ee

IMPHASH 1ade0c421319db62d1a43eb81ccf4513
SHA256 833f43c1e0e4f706ddd75fb8684d085a8684bb99438d69bcd132e0eaca5460e3
MD5 ba1a5c444567cae813f709865ae654ee
SHA1 91b7de94a2743ed9320fc31d765734325438006e
SHA512 8ce08a0e87a71f6f22e523645aaec3d5032a3c25fac2d621a8ecbace00c7b35f3fc9ef2c525adec81da9e6f4584208aec484dcbce97830740c4ee37def49d940
SSDEEP 3072:/80xyzMuFd4mvxJJXwsxlKVr8N3wtmMz1xamnpdW79QuUh9W:U0xyzzUWJXwsxgw0z1xRpdWx1y
TLSH
T17FD3022CF6514AD6C0E70EBE2704E6315EBA5A34C4C482DB6FC529CACA662B4CD47F03
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

43338

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

GetCaretPos mouse_event DestroyCaret VkKeyScanW GetClassInfoExW GetDlgItemTextW SetRect DefDlgProcA EnableMenuItem SetForegroundWindow RegisterClassExA DestroyCursor OpenIcon ScrollWindow GetClassNameW GetFocus SetDlgItemTextW SetScrollPos DrawTextExW SetCaretPos OemToCharBuffA DrawIcon PostMessageW SetMenuDefaultItem LoadMenuW EndDialog MonitorFromRect GetWindowTextLengthW CreateCursor GetDC CheckMenuItem SetDlgItemInt ShowScrollBar ActivateKeyboardLayout IsWindowUnicode MessageBoxExA

ntdll

memset

kernel32

LocalLock CreateMailslotW GlobalAlloc GlobalDeleteAtom ReleaseSemaphore ClearCommError lstrcmpW GetModuleHandleA GetLocaleInfoW FindResourceA HeapCreate Sleep WaitCommEvent FlushViewOfFile DeviceIoControl GetUserDefaultLCID VirtualFree GetVersionExA

gdi32

GetNearestColor RectVisible GetCurrentPositionEx EndDoc SetLayout GetDeviceCaps EndPage IntersectClipRect SetViewportOrgEx SetAbortProc CreateDCW SetWindowExtEx GetTextMetricsW DPtoLP GetSystemPaletteUse GetTextAlign SelectClipRgn

comctl32

ImageList_ReplaceIcon CreateToolbarEx CreatePropertySheetPageA ImageList_Create ImageList_LoadImageW ImageList_GetIconSize

Name

.text

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.nfodat

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.point

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.temp

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.port

Size

36KB

Virtual Size

126KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.ba1a5c444567cae813f709865ae654ee

user32

ntdll

kernel32

gdi32

comctl32

generic