jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]0d1bf204f9b42d75498d622eff19cc22

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.0d1bf204f9b42d75498d622eff19cc22
Size 418KB
Sample261013-2bc64sct2z
SHA256 47186eb575b25bbb1803324e1777d15a6aeee9e416d8b3766c0adab22cc584ed
MD5 0d1bf204f9b42d75498d622eff19cc22
SHA1 0f10b2a1071b69f6d8b94d37c3bad3feded20de8
SHA512 b7b79a90b5acaf3b75c08d6b462a7df06f7bbd1a5a48be64b96ce7f663df4fc6f9f0e77c8445a9730651759598539e910f442b7ea0a97ac63bf50013f9d76c22
SSDEEP 12288:osfmHLE5rHpqD+Xd82pGQoGJ/jQEUwkgZ:ozLeDID+ppQGJUEUvgZ
TLSH
T18194DF106182C061FB998B748623FAE0255DDC3869D1F04FE9783D363AB60939EB365F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.0d1bf204f9b42d75498d622eff19cc22

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.0d1bf204f9b42d75498d622eff19cc22

.exe 418KB

jaffacakes118_HEUR.Trojan.Win32.Generic.0d1bf204f9b42d75498d622eff19cc22

IMPHASH d9d77a70ba15840a5751fd03111bca89
SHA256 47186eb575b25bbb1803324e1777d15a6aeee9e416d8b3766c0adab22cc584ed
MD5 0d1bf204f9b42d75498d622eff19cc22
SHA1 0f10b2a1071b69f6d8b94d37c3bad3feded20de8
SHA512 b7b79a90b5acaf3b75c08d6b462a7df06f7bbd1a5a48be64b96ce7f663df4fc6f9f0e77c8445a9730651759598539e910f442b7ea0a97ac63bf50013f9d76c22
SSDEEP 12288:osfmHLE5rHpqD+Xd82pGQoGJ/jQEUwkgZ:ozLeDID+ppQGJUEUvgZ
TLSH
T18194DF106182C061FB998B748623FAE0255DDC3869D1F04FE9783D363AB60939EB365F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5449

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

B:\Temp\dPE\Release\dPE.pdb

ole32

CoUninitialize CoInitialize

user32

ShowWindow LoadAcceleratorsW EndDialog PostQuitMessage GetDesktopWindow EndPaint BeginPaint DefWindowProcW DestroyWindow DialogBoxParamW GetClientRect UpdateWindow GetMessageW CreateWindowExW RegisterClassExW LoadCursorW LoadIconW DispatchMessageW TranslateMessage TranslateAcceleratorW LoadStringW

dbghelp

ImageNtHeader

kernel32

DeleteCriticalSection LCMapStringW LCMapStringA GetStringTypeW MultiByteToWideChar GetStringTypeA WideCharToMultiByte GetLocaleInfoA HeapSize RtlUnwind HeapReAlloc HeapAlloc IsValidCodePage GetOEMCP GetACP GetCPInfo InitializeCriticalSectionAndSpinCount VirtualQuery VirtualAlloc VirtualProtect VirtualFree LoadLibraryA GetProcAddress GetModuleHandleA FindResourceExW SizeofResource LoadResource LockResource FreeResource GetStartupInfoW SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection

Sharing