jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]0d1b19a0bdd1ded153b7d7861e57e79e

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.0d1b19a0bdd1ded153b7d7861e57e79e
Size 673KB
Sample261013-2ba2ract2y
SHA256 21091fe6e7c207c1068c6e7b62ce1da18ec5f09d475cc4a397fe2236355db65c
MD5 0d1b19a0bdd1ded153b7d7861e57e79e
SHA1 a44b3cc3fd64f1f0e00fb3f14b91988bc24f77d9
SHA512 a688587e43a64e842c26fbfe3dbc503ece298be33c7711ead87ed13e401b77766a5c8a0c950590714818071dd45ec748c275ae44190678a5810ff034eb88496d
SSDEEP 12288:DyT+J+GU0IsYMNobXaundbYhAizbPPyZ7FUEqLTQAj/p:qbG4lndc2izbHuBUrLTQADp
TLSH
T1B3E4F0203AC1C4F7D51345B2C8C9E6F891A7FEB15B3193177B8427AEAF3D186DA14262
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.0d1b19a0bdd1ded153b7d7861e57e79e

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.0d1b19a0bdd1ded153b7d7861e57e79e

.exe 673KB

jaffacakes118_HEUR.Trojan.Win32.Generic.0d1b19a0bdd1ded153b7d7861e57e79e

IMPHASH 4f81243f9a9b4689be8330a39cfb7db0
SHA256 21091fe6e7c207c1068c6e7b62ce1da18ec5f09d475cc4a397fe2236355db65c
MD5 0d1b19a0bdd1ded153b7d7861e57e79e
SHA1 a44b3cc3fd64f1f0e00fb3f14b91988bc24f77d9
SHA512 a688587e43a64e842c26fbfe3dbc503ece298be33c7711ead87ed13e401b77766a5c8a0c950590714818071dd45ec748c275ae44190678a5810ff034eb88496d
SSDEEP 12288:DyT+J+GU0IsYMNobXaundbYhAizbPPyZ7FUEqLTQAj/p:qbG4lndc2izbHuBUrLTQADp
TLSH
T1B3E4F0203AC1C4F7D51345B2C8C9E6F891A7FEB15B3193177B8427AEAF3D186DA14262
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

84979

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteCriticalSection MultiByteToWideChar WideCharToMultiByte GetLastError LoadLibraryA AreFileApisANSI GetModuleFileNameA GetModuleFileNameW CloseHandle SetFileTime CreateFileW SetLastError SetFileAttributesA RemoveDirectoryA CreateDirectoryA DeleteFileA SetFileAttributesW RemoveDirectoryW CreateDirectoryW DeleteFileW lstrlenA GetFullPathNameA SetCurrentDirectoryW GetFullPathNameW FindClose FindFirstFileA FindFirstFileW GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile CreateFileA GetStdHandle EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects Sleep VirtualAlloc VirtualFree WaitForSingleObject CreateEventA SetEvent ResetEvent InitializeCriticalSection CreateProcessA ExpandEnvironmentStringsW SetConsoleMode CompareStringW LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount GetLocaleInfoA IsValidCodePage GetOEMCP GetACP GetCPInfo GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA HeapSize ExitProcess HeapCreate IsDebuggerPresent GetCurrentProcess TerminateProcess InterlockedDecrement InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue RaiseException RtlUnwind HeapAlloc HeapFree HeapReAlloc ExitThread GetCurrentThreadId CreateThread GetCommandLineA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW GetProcAddress

user32

DestroyWindow LoadIconA EndDialog GetDlgItem KillTimer SetTimer PostMessageA SendMessageA MessageBoxW DialogBoxParamW DialogBoxParamA GetWindowLongA SetWindowLongA ShowWindow SetWindowTextW SetWindowTextA LoadStringW LoadStringA CharUpperW CharUpperA

oleaut32

SysAllocString VariantClear

Sharing