jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]45faad95512800f83f5d72b1aa7e21b4

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.45faad95512800f83f5d72b1aa7e21b4
Size 174KB
Sample261011-zzphyac15w
SHA256 13df9b06ca3eb12ef1456354c87a7ede9ee13a8dad3e0ffca962ca13580fa00c
MD5 45faad95512800f83f5d72b1aa7e21b4
SHA1 2943e3be4c4139d4ebf87f363f2e6e87e65c7f92
SHA512 d9d8069382589a086059c32eac9b1f8383a35fc0d48ce2a6ee7ad024da08cfe9f79759c665c761d53868f3ddb6707b6e27352fc3f588ce29767556452a34fb76
SSDEEP 3072:WLzlW0d1XSTGQvNC2dmXqzVt+Y5cRkYxatAostUJ+Vw5b2wHz:WNW0d1CTVtgXmVtB5cRXaVmg+My
TLSH
T11704F0F57911C95FE2FC843070A38A72775A31A5D3D20CC6DE98876E1B6620CCC67BA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.45faad95512800f83f5d72b1aa7e21b4

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.45faad95512800f83f5d72b1aa7e21b4

.exe 174KB

jaffacakes118_HEUR.Trojan.Win32.Generic.45faad95512800f83f5d72b1aa7e21b4

IMPHASH 32eaf6d488b5959a155945dfe3b3de64
SHA256 13df9b06ca3eb12ef1456354c87a7ede9ee13a8dad3e0ffca962ca13580fa00c
MD5 45faad95512800f83f5d72b1aa7e21b4
SHA1 2943e3be4c4139d4ebf87f363f2e6e87e65c7f92
SHA512 d9d8069382589a086059c32eac9b1f8383a35fc0d48ce2a6ee7ad024da08cfe9f79759c665c761d53868f3ddb6707b6e27352fc3f588ce29767556452a34fb76
SSDEEP 3072:WLzlW0d1XSTGQvNC2dmXqzVt+Y5cRkYxatAostUJ+Vw5b2wHz:WNW0d1CTVtgXmVtB5cRXaVmg+My
TLSH
T11704F0F57911C95FE2FC843070A38A72775A31A5D3D20CC6DE98876E1B6620CCC67BA9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

gdiplus

GdipGetImageWidth GdipDisposeImage

user32

GetGUIThreadInfo GetWindowThreadProcessId AllowSetForegroundWindow GetPropW GetClassNameW GetForegroundWindow

ole32

CoGetProcessIdentifier StringFromGUID2 CoInitialize CoTaskMemAlloc CoUninitialize CoTaskMemFree

kernel32

LocalAlloc GetSystemDirectoryW QueryPerformanceCounter GetCalendarInfoW GetLongPathNameW ExpandEnvironmentStringsW GetSystemTimeAsFileTime SearchPathW OutputDebugStringW OpenProcess GetProcessHeap FindFirstFileW MapViewOfFile GetCurrentThreadId DeviceIoControl SetFileAttributesW GetProcessId SetLastError VirtualQuery GetCurrentProcessId InterlockedDecrement TlsAlloc UnhandledExceptionFilter InterlockedCompareExchange GetEnvironmentVariableW FreeLibrary GetLogicalDriveStringsW CreateFileW GetModuleHandleA SetUnhandledExceptionFilter ExitProcess TlsGetValue CloseHandle UnmapViewOfFile OpenEventW WideCharToMultiByte TerminateProcess InitializeCriticalSectionAndSpinCount HeapAlloc IsWow64Process LeaveCriticalSection GetProcAddress DecodePointer GetFileAttributesW EnumResourceNamesA QueryDosDeviceW DeleteCriticalSection GetModuleFileNameW EncodePointer LoadLibraryW GetCurrentProcess OutputDebugStringA GetCurrentDirectoryW MultiByteToWideChar GetModuleHandleW ReleaseMutex CreateDirectoryW GetModuleHandleExW GetFullPathNameW TlsSetValue InterlockedExchange TlsFree FindNextFileW SetEnvironmentVariableW GetFileSizeEx InitializeCriticalSection WaitForSingleObject lstrcmpiW GetWindowsDirectoryW InterlockedIncrement lstrlenW GetTickCount EnterCriticalSection GetLastError VirtualProtect HeapFree LocalFree Sleep FindClose WaitForSingleObjectEx DuplicateHandle CreateFileMappingW GetFileInformationByHandle CreateMutexW

advapi32

RegCreateKeyExW RegEnumKeyW EncryptFileW RegSetValueExW RegQueryInfoKeyW RegQueryValueExW RegEnumValueW DecryptFileW RegOpenKeyExW RegCloseKey

shlwapi

PathIsUNCW PathSkipRootW PathGetArgsW StrDupW SHRegGetValueW PathFindFileNameW