jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]f31f0e9ce8a7b4a862ef64ad764e8912

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.f31f0e9ce8a7b4a862ef64ad764e8912
Size 257KB
Sample261011-1gnpcshd26
SHA256 6b0a115ff4c1db3136b9d234287e2c477a12d4332044fad11fc09513308a323c
MD5 f31f0e9ce8a7b4a862ef64ad764e8912
SHA1 8b5f896fc8521085ac72579689955d954041edc7
SHA512 a8a600b76d806fb02a4a8ebe086545f978aad8e3f67b369262187c026c5ed2da457b1e88b8d6a5ad73e99ea43c8f791da97347c9b7b7a55e0deefa2fdbc3da3a
SSDEEP 6144:kyHW5TFxsa3YPBY2Txu9NlMsGk1/N/Hq:kyHCFx+zduTlMsGk1hHq
TLSH
T1F444399232A0C831C76603794799D7F3456F78715E197987BBC40BBCAA3A7F19E3420A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.f31f0e9ce8a7b4a862ef64ad764e8912

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.f31f0e9ce8a7b4a862ef64ad764e8912

.exe 257KB

jaffacakes118_HEUR.Trojan.Win32.Generic.f31f0e9ce8a7b4a862ef64ad764e8912

IMPHASH f39e636eecf3c454ef7abad4f507f542
SHA256 6b0a115ff4c1db3136b9d234287e2c477a12d4332044fad11fc09513308a323c
MD5 f31f0e9ce8a7b4a862ef64ad764e8912
SHA1 8b5f896fc8521085ac72579689955d954041edc7
SHA512 a8a600b76d806fb02a4a8ebe086545f978aad8e3f67b369262187c026c5ed2da457b1e88b8d6a5ad73e99ea43c8f791da97347c9b7b7a55e0deefa2fdbc3da3a
SSDEEP 6144:kyHW5TFxsa3YPBY2Txu9NlMsGk1/N/Hq:kyHCFx+zduTlMsGk1hHq
TLSH
T1F444399232A0C831C76603794799D7F3456F78715E197987BBC40BBCAA3A7F19E3420A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

76583

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

N:\down2.winsoft1.com\setup\p005_wsk1\setup.pdb

kernel32

lstrlenA lstrcatA lstrcpyA SetLastError GetLastError CreateRemoteThread GetProcAddress GetExitCodeProcess DuplicateHandle GetCurrentProcess ExpandEnvironmentStringsA CreateMutexA MoveFileA RemoveDirectoryA DeleteFileA CreateDirectoryA GetTempPathA GetCommandLineA GetModuleFileNameA GetLocalTime GetTickCount GetFileAttributesExA CreateThread WaitForSingleObject TerminateThread CloseHandle Sleep GetModuleHandleA WriteFile CompareStringW CompareStringA GetLocaleInfoW GetTimeZoneInformation ReadFile GetProcessHeap SetEndOfFile LoadLibraryA InterlockedExchange FreeLibrary SetConsoleCtrlHandler IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle SetFilePointer HeapReAlloc RtlUnwind RaiseException GetStartupInfoA HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCurrentThread TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA MultiByteToWideChar LCMapStringW HeapSize ExitProcess HeapAlloc GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA VirtualAlloc SetEnvironmentVariableA

advapi32

RegDeleteValueA RegOpenKeyExA RegQueryValueExA RegCreateKeyExA RegSetValueExA RegCloseKey RegOpenKeyA

shell32

ShellExecuteA

ole32

CoInitialize

oleaut32

SysFreeString

user32

wsprintfA

shlwapi

PathGetArgsA PathFileExistsA PathIsDirectoryA PathRemoveBlanksA PathFindFileNameA

ws2_32

closesocket __WSAFDIsSet select connect send recv ioctlsocket htons gethostbyname socket WSAStartup

netapi32

Netbios