jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]de4c8eebf308fb9d1f9915b4549e6865

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.de4c8eebf308fb9d1f9915b4549e6865
Size 145KB
Sample261011-1eq2psft8n
SHA256 70083abfb5ee85b154382e253a3badae3ef8084786aabd472acc39df30e3eeb1
MD5 de4c8eebf308fb9d1f9915b4549e6865
SHA1 b9e31040ba27029e8f8bb69f5072f94615ca39fc
SHA512 c5136cbdc60cd8b5e44533b22a5e11e30eeeae7861e3ccaa94271ad1093a5e461fe538be7e3de7d0d682c89b75680054251cea0c74eca794a28d33ad7b815b2c
SSDEEP 3072:GgPmTZg2MHay+eDj17cfUeMnG1CEw3QCTZk4RxaGtuh3nq5qRCd4i7aqR:2MayS4InwgCTO4R4I5owNe6
TLSH
T1B2E312365DDB70ACE27AA6B3931463CD9AA87BE0182CC54F44500D05AB7698DFCB2F46
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.de4c8eebf308fb9d1f9915b4549e6865

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.de4c8eebf308fb9d1f9915b4549e6865

.exe 145KB

jaffacakes118_HEUR.Trojan.Win32.Generic.de4c8eebf308fb9d1f9915b4549e6865

IMPHASH 1ef1c47c7e751bc1a29477e0bfbc070c
SHA256 70083abfb5ee85b154382e253a3badae3ef8084786aabd472acc39df30e3eeb1
MD5 de4c8eebf308fb9d1f9915b4549e6865
SHA1 b9e31040ba27029e8f8bb69f5072f94615ca39fc
SHA512 c5136cbdc60cd8b5e44533b22a5e11e30eeeae7861e3ccaa94271ad1093a5e461fe538be7e3de7d0d682c89b75680054251cea0c74eca794a28d33ad7b815b2c
SSDEEP 3072:GgPmTZg2MHay+eDj17cfUeMnG1CEw3QCTZk4RxaGtuh3nq5qRCd4i7aqR:2MayS4InwgCTO4R4I5owNe6
TLSH
T1B2E312365DDB70ACE27AA6B3931463CD9AA87BE0182CC54F44500D05AB7698DFCB2F46
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10974

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ntdll

wcslen _vsnwprintf

shlwapi

StrFormatKBSizeW StrFormatByteSizeA PathBuildRootW PathStripPathW StrCatW

shell32

ord747

kernel32

TlsGetValue GetProfileIntW SetFileTime WaitNamedPipeW FatalAppExitW InitAtomTable SetStdHandle SetupComm SetFileApisToANSI GetThreadPriority PurgeComm OpenEventW UnregisterWaitEx FileTimeToDosDateTime GetDiskFreeSpaceExA GetProcessWorkingSetSize LoadLibraryW lstrlenA OpenFileMappingA GetNamedPipeInfo GetSystemTimeAdjustment FormatMessageW ConnectNamedPipe CreateEventW

user32

LoadMenuIndirectA RealGetWindowClassW DestroyAcceleratorTable InvertRect EnumPropsW VkKeyScanA LookupIconIdFromDirectory GetDlgItemTextA RedrawWindow SetCursorPos InflateRect GetQueueStatus GetDC DlgDirListA DialogBoxIndirectParamW GetLastActivePopup LoadImageW RegisterShellHookWindow GetWindowDC CreateMDIWindowW IsCharUpperA GetRawInputData DrawTextW WindowFromPoint GetClientRect CreateAcceleratorTableW EnumPropsA PeekMessageW GetListBoxInfo TabbedTextOutA GetMenuContextHelpId ShowScrollBar PostThreadMessageW MessageBoxW MapWindowPoints ExcludeUpdateRgn DispatchMessageW GetShellWindow ExitWindowsEx TranslateMessage

gdi32

AbortDoc CreateEnhMetaFileW SetMapMode ResetDCA GetBrushOrgEx ScaleWindowExtEx GetGlyphIndicesW GetTextExtentPointA CreateBitmapIndirect GetMetaRgn GetOutlineTextMetricsA LineTo AnimatePalette SetGraphicsMode GetLayout GetBitmapBits TextOutA

advapi32

GetAclInformation MapGenericMask GetSidSubAuthority

Name

.text

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.extext

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bmem

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sedat

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

125KB

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

878B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.de4c8eebf308fb9d1f9915b4549e6865

ntdll

shlwapi

shell32

kernel32

user32

gdi32

advapi32

generic