jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]15d4af5772137ebf2cf0bf76fd93d5b3

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.15d4af5772137ebf2cf0bf76fd93d5b3
Size 31KB
Sample261013-24va4adf66
SHA256 736e811a18c34187a9686db5135625979868677ed8e15de2e40ec334aac6801a
MD5 15d4af5772137ebf2cf0bf76fd93d5b3
SHA1 ace4056bfa5611debdf98303f174d419e5c65f78
SHA512 a6cec5151270581c3bfaf5904aff0f21fbbbe0930949627863ee701fe621be8293297a8061c4e7407ef22d75c3c10df735459d36e20facf04421ea023c416416
SSDEEP 768:xV4wxeKkrmbzw37oYD7C/pH8AKghqD2RJXzA:xV4wxehSw397C/dDkqRJjA
TLSH
T1B7E26C13BA4284B7E396023875512F7ECBFCA9306A565066E71247CA1CB09C3EEB6243
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.15d4af5772137ebf2cf0bf76fd93d5b3

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.15d4af5772137ebf2cf0bf76fd93d5b3

.dll 31KB

jaffacakes118_HEUR.Trojan.Win32.Generic.15d4af5772137ebf2cf0bf76fd93d5b3

IMPHASH 84c029a02de0e7918adafd19bc967878
SHA256 736e811a18c34187a9686db5135625979868677ed8e15de2e40ec334aac6801a
MD5 15d4af5772137ebf2cf0bf76fd93d5b3
SHA1 ace4056bfa5611debdf98303f174d419e5c65f78
SHA512 a6cec5151270581c3bfaf5904aff0f21fbbbe0930949627863ee701fe621be8293297a8061c4e7407ef22d75c3c10df735459d36e20facf04421ea023c416416
SSDEEP 768:xV4wxeKkrmbzw37oYD7C/pH8AKghqD2RJXzA:xV4wxehSw397C/dDkqRJjA
TLSH
T1B7E26C13BA4284B7E396023875512F7ECBFCA9306A565066E71247CA1CB09C3EEB6243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CreateThread WaitForSingleObject ReadFile GetFileSize SetFilePointer GetLastError CreateEventA GetModuleFileNameA GetTempPathA GetWindowsDirectoryA GetSystemDirectoryA SetFileAttributesA GetCommandLineA MultiByteToWideChar GlobalLock CreateFileA WriteFile GlobalUnlock GlobalFree CloseHandle LoadLibraryA GetProcAddress GlobalAlloc VirtualProtect GetModuleHandleA Sleep ExitProcess DeleteFileA GetCurrentDirectoryA GetPrivateProfileStringA

user32

GetParent GetWindowThreadProcessId EnumWindows wsprintfA GetWindowTextA ReleaseDC GetWindowRect GetDC GetDesktopWindow GetClientRect CallWindowProcA GetClassNameA SetWindowLongA RegisterShellHookWindow RegisterWindowMessageA

gdi32

CreateDCA GetDeviceCaps DeleteObject BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC GetDIBits RealizePalette SelectPalette GetStockObject GetObjectA DeleteDC

gdiplus

GdipCloneImage GdipAlloc GdipFree GdipGetImageEncodersSize GdipGetImageEncoders GdiplusStartup GdipDisposeImage GdiplusShutdown GdipSaveImageToFile GdipLoadImageFromFile

msvcp60

??0_Lockit@std@@QAE@XZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??0Init@ios_base@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ

ws2_32

WSAStartup send recv socket inet_addr htons connect gethostbyname inet_ntoa closesocket WSACleanup

wininet

InternetOpenUrlA InternetCloseHandle InternetReadFile InternetOpenA

msvcrt

strrchr _access strcat memset strchr strncpy free __dllonexit _onexit _initterm _adjust_fdiv _getpid _stricmp _strlwr _strrev strstr abs malloc wcscmp ??2@YAPAXI@Z memcpy __CxxFrameHandler strcmp strlen atoi strcpy sprintf

netapi32

Netbios