jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]15a44ea8d33de9d2fee9cbeb7a17fead

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.15a44ea8d33de9d2fee9cbeb7a17fead
Size 2.1MB
Sample261013-23rtksdv2k
SHA256 3584f0d0d6c6941c68898f01cb0965f3dc7907debafcaeb1e4fce13bbf49060a
MD5 15a44ea8d33de9d2fee9cbeb7a17fead
SHA1 45b3071ba26c3be5e091075e2c909c300573b4a4
SHA512 ddc7260446d8fa3f35ab01110dbb6f38a2a82286fb652f64a498543553edbeceef9d1a9c2e28dcaf8818fb1b4fa997134a3075126c1bee30c2826b13564b218e
SSDEEP 49152:sfUBBHHhphEan2mIVgOpDt7QyanlgTTZQJAp:sUHhph/p5OpDbgtWp
TLSH
T102A5231679C08CB1D47274B108A9C370AA3EF831CDA58CAF5B58462D867E0E25F39D7B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.15a44ea8d33de9d2fee9cbeb7a17fead

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.15a44ea8d33de9d2fee9cbeb7a17fead

.exe 2.1MB

jaffacakes118_HEUR.Trojan.Win32.Generic.15a44ea8d33de9d2fee9cbeb7a17fead

IMPHASH 6eb0e25699439d57e1c39cc107f281c2
SHA256 3584f0d0d6c6941c68898f01cb0965f3dc7907debafcaeb1e4fce13bbf49060a
MD5 15a44ea8d33de9d2fee9cbeb7a17fead
SHA1 45b3071ba26c3be5e091075e2c909c300573b4a4
SHA512 ddc7260446d8fa3f35ab01110dbb6f38a2a82286fb652f64a498543553edbeceef9d1a9c2e28dcaf8818fb1b4fa997134a3075126c1bee30c2826b13564b218e
SSDEEP 49152:sfUBBHHhphEan2mIVgOpDt7QyanlgTTZQJAp:sUHhph/p5OpDbgtWp
TLSH
T102A5231679C08CB1D47274B108A9C370AA3EF831CDA58CAF5B58462D867E0E25F39D7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5612

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

172B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

928KB

Virtual Size

927KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jaffacakes118_HEUR.Trojan.Win32.Generic.15a44ea8d33de9d2fee9cbeb7a17fead

kernel32

user32

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.15a44ea8d33de9d2fee9cbeb7a17fead

kernel32

user32

generic