jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]0b952ff7e5c974a1223e0e29c650415c

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.0b952ff7e5c974a1223e0e29c650415c
Size 340KB
Sample261013-16bfbst1cy
SHA256 b946f0ebf3a5ee317f72fb6b316fee0fe6adf886b312bea495b3b7d924a8ac41
MD5 0b952ff7e5c974a1223e0e29c650415c
SHA1 23d411434a3508f865e67a9f8456036d6f2b68ca
SHA512 4f3da2a9d665ebffa5b6d74a0d684f1811d8ac9a7999cd636207b050a27891197a0b72c92d98fbe005458e870cf6115bec3ad004415851d0990082e9d3297102
SSDEEP 6144:9f8nVi382uRQLFd3hqNTlAtXBhsUFOmAj76s4asN/I8F612bCa+TSz2JT:OnY382uapOhl+hsUFOmE76s4xKJ2WaX
TLSH
T19A74CF6177D4E051E0ED0E308C66C7E6CA35BD11EE31E19B2399B74D6E326C5AC70B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.0b952ff7e5c974a1223e0e29c650415c

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.0b952ff7e5c974a1223e0e29c650415c

.exe 340KB

jaffacakes118_HEUR.Trojan.Win32.Generic.0b952ff7e5c974a1223e0e29c650415c

IMPHASH 7757df96a551166841030b8c155efa55
SHA256 b946f0ebf3a5ee317f72fb6b316fee0fe6adf886b312bea495b3b7d924a8ac41
MD5 0b952ff7e5c974a1223e0e29c650415c
SHA1 23d411434a3508f865e67a9f8456036d6f2b68ca
SHA512 4f3da2a9d665ebffa5b6d74a0d684f1811d8ac9a7999cd636207b050a27891197a0b72c92d98fbe005458e870cf6115bec3ad004415851d0990082e9d3297102
SSDEEP 6144:9f8nVi382uRQLFd3hqNTlAtXBhsUFOmAj76s4asN/I8F612bCa+TSz2JT:OnY382uapOhl+hsUFOmE76s4xKJ2WaX
TLSH
T19A74CF6177D4E051E0ED0E308C66C7E6CA35BD11EE31E19B2399B74D6E326C5AC70B2A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32201

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetPrivateProfileIntW GetPrivateProfileSectionW GetPrivateProfileStringA GetPrivateProfileStringW GetProcAddress GetProcessHeap GetSystemDefaultUILanguage GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTickCount GetUserDefaultUILanguage GetVersion GetVersionExA GetVersionExW GetWindowsDirectoryW GlobalFree HeapAlloc HeapFree InitializeCriticalSectionAndSpinCount InterlockedCompareExchange InterlockedDecrement InterlockedExchange IsDBCSLeadByte LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LoadResource LocalAlloc LocalFree GetModuleFileNameW LockResource MapViewOfFile MoveFileExW MoveFileW MultiByteToWideChar OpenEventW OutputDebugStringA OutputDebugStringW QueryPerformanceCounter ReadFile RemoveDirectoryW ResumeThread RtlUnwind SearchPathW SetFileAttributesW SetFilePointer SetLastError SetUnhandledExceptionFilter SizeofResource Sleep TerminateProcess UnhandledExceptionFilter UnmapViewOfFile WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcmpW lstrcmpiA lstrlenA lstrlenW GetLocaleInfoW GetLocalTime GetLastError GetFileSize GetFileAttributesW GetFileAttributesExW GetExitCodeThread GetCurrentThreadId GetCurrentProcessId GetCurrentProcess GetComputerNameW FreeLibrary FlushFileBuffers FindResourceW FindResourceExW FindNextFileW FindFirstFileW FindClose FileTimeToSystemTime ExpandEnvironmentStringsW EnumUILanguagesW EnterCriticalSection DisableThreadLibraryCalls DeleteFileW DeleteCriticalSection CreateThread CreateFileW CreateFileMappingW CreateDirectoryW CopyFileW CompareStringW CompareStringA LocalReAlloc CloseHandle

user32

MsgWaitForMultipleObjects PeekMessageW PostMessageW SendDlgItemMessageW SendMessageTimeoutW SetCursor SetTimer TranslateMessage LoadStringW LoadImageW KillTimer GetWindow GetTopWindow GetSystemMetrics GetMessageW GetClassNameA EndDialog DispatchMessageW DialogBoxParamW DestroyIcon CharNextW CharLowerW LoadCursorW

advapi32

RegOpenKeyExW EnumServicesStatusExW DuplicateTokenEx CreateProcessAsUserW CopySid ConvertStringSidToSidW CloseServiceHandle AllocateAndInitializeSid AdjustTokenPrivileges RegQueryInfoKeyW RegQueryValueExA RegQueryValueExW RegSaveKeyW RegSetValueExW RevertToSelf SetFileSecurityW SetSecurityDescriptorOwner GetLengthSid GetTokenInformation ImpersonateLoggedOnUser InitializeSecurityDescriptor LookupPrivilegeNameW LookupPrivilegeValueW OpenProcessToken OpenSCManagerW RegCloseKey RegCreateKeyExW RegDeleteValueW RegEnumKeyExW RegEnumKeyW RegEnumValueW RegOpenKeyExA FreeSid

shlwapi

StrTrimW StrToIntW StrToIntExW StrStrW ChrCmpIA PathAddBackslashW PathAddExtensionW PathAppendW PathCombineW PathFileExistsW PathFindExtensionW PathFindFileNameW PathFindNextComponentW PathGetCharTypeW PathGetDriveNumberW PathIsDirectoryW PathIsFileSpecW PathIsPrefixW PathIsRootW PathIsUNCServerW PathIsURLW PathRemoveBackslashW PathRemoveBlanksW PathRemoveExtensionW PathRemoveFileSpecW PathRenameExtensionW PathSkipRootW PathUnquoteSpacesW SHDeleteEmptyKeyW SHDeleteKeyW SHDeleteValueW SHGetValueW StrStrIW SHSetValueW StrChrIW StrChrW StrCmpIW StrCmpNIW StrCmpNW StrCmpW StrDupW StrRChrW StrRetToStrW StrSpnW SHQueryValueExW

ole32

StringFromGUID2 CreateBindCtx CoUninitialize CoTaskMemRealloc CoTaskMemFree CoTaskMemAlloc CoInitializeEx CoCreateInstance CoCreateGuid

oleaut32

VariantInit SysStringByteLen VariantCopy VariantClear VariantChangeType SysStringLen SafeArrayAccessData SafeArrayCreate SafeArrayDestroy SafeArrayPutElement SafeArrayUnaccessData SysAllocString SysAllocStringByteLen SysFreeString

shell32

SHGetDesktopFolder ShellExecuteExW SHChangeNotify

setupapi

SetupCloseInfFile SetupFindFirstLineW SetupFindNextLine SetupGetBinaryField SetupGetIntField SetupGetLineTextW SetupGetStringFieldW SetupOpenInfFileW