jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]0d86d7cef1803dabb5828e9b6c55bf07

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.0d86d7cef1803dabb5828e9b6c55bf07
Size 245KB
Sample261013-2desqact5y
SHA256 7f37bca97a4cd20ae237461db9b1abee81e9887e97403312c036ec50bd89cccd
MD5 0d86d7cef1803dabb5828e9b6c55bf07
SHA1 4ad2315766ab8df8f9cb8e185a38206f736fc112
SHA512 2c4e8875974f506092374f3784e82015a7d2b2cdf899bd32b7dd9988c42d8bb07a71adf66822cffe67d957477e6acbadd9b82c47dfa1a4f0f18cb58533dcd1b7
SSDEEP 3072:eZHrzzRqE0SRSVHwVVwVQnNwCEf+XGOfFjk/2VtB+2r+AyVMrqy/bv8Y7EJ1OpVv:e/zIV8NdEf+2Of9I8TyVMr7b0Y4Op
TLSH
T145349E1166518C72F7980B340816F5E4566AAE3926E6E10FF27C7E363F311939A3B24F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.0d86d7cef1803dabb5828e9b6c55bf07

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.0d86d7cef1803dabb5828e9b6c55bf07

.exe 245KB

jaffacakes118_HEUR.Trojan.Win32.Generic.0d86d7cef1803dabb5828e9b6c55bf07

IMPHASH 8206556218a41806643c47c50955da64
SHA256 7f37bca97a4cd20ae237461db9b1abee81e9887e97403312c036ec50bd89cccd
MD5 0d86d7cef1803dabb5828e9b6c55bf07
SHA1 4ad2315766ab8df8f9cb8e185a38206f736fc112
SHA512 2c4e8875974f506092374f3784e82015a7d2b2cdf899bd32b7dd9988c42d8bb07a71adf66822cffe67d957477e6acbadd9b82c47dfa1a4f0f18cb58533dcd1b7
SSDEEP 3072:eZHrzzRqE0SRSVHwVVwVQnNwCEf+XGOfFjk/2VtB+2r+AyVMrqy/bv8Y7EJ1OpVv:e/zIV8NdEf+2Of9I8TyVMr7b0Y4Op
TLSH
T145349E1166518C72F7980B340816F5E4566AAE3926E6E10FF27C7E363F311939A3B24F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\temp\locker_08_08_2011\Release\locker.pdb

kernel32

GetModuleFileNameA CompareStringW CompareStringA LCMapStringW LCMapStringA GetStringTypeW MultiByteToWideChar GetStringTypeA GetTimeZoneInformation CopyFileA IsValidCodePage GetOEMCP GetACP GetCPInfo GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStrings lstrlenA GetModuleHandleA FindResourceA LoadResource SizeofResource LockResource GlobalAlloc GlobalLock GlobalUnlock GetLocaleInfoA MulDiv FreeEnvironmentStringsA InitializeCriticalSectionAndSpinCount LoadLibraryA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetStdHandle WriteFile InterlockedDecrement GetCurrentThreadId HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap GetLastError GetModuleHandleW Sleep GetProcAddress ExitProcess GetLocalTime RaiseException RtlUnwind GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError SetEnvironmentVariableA

user32

PostMessageA FindWindowA GetWindowTextA EndPaint GetDC BeginPaint SendMessageA ReleaseDC DefWindowProcA LoadStringA LoadAcceleratorsA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA SetWindowPos SetWindowLongA ShowWindow SetTimer UpdateWindow LoadIconA LoadCursorA RegisterClassExA GetSystemMetrics PostQuitMessage CreateWindowExA

gdi32

SetTextColor SetBkColor GetStockObject GetDeviceCaps CreateFontA

advapi32

RegOpenKeyExA RegCreateKeyExA RegCloseKey RegSetValueExA

shell32

SHGetSpecialFolderPathA

ole32

CreateStreamOnHGlobal

oleaut32

OleLoadPicture