jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]0eb2d3a472fd847ccbfea

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.0eb2d3a472fd847ccbfea
Size 312KB
Sample261013-2kv4aa112p
SHA256 aa78d0cd257b138ca4f6bda149fcc448fa8b1fcae76ec13a7e89ce19ee228128
MD5 9f0e79527970eb2d3a472fd847ccbfea
SHA1 2a62a66f6f53c0433275191886893eafcd679953
SHA512 f30783c3da5a767f23a989304d5230badf1f6de5c57c610d044fd5af40270bc7bc060c9ed3f88f1172cb845c18a3c897b0aa7f55d2c8112b78280e85c5f7f7a6
SSDEEP 6144:dckBY74u2Zgu/oAOrJ5CiitIJo2ZxmjYftEB:dNY74/gH7oiitLZ8FEB
TLSH
T1E664BE2178D2C872D1B3193405F4A7712A7EB9614B389AEF57D40B7E4EB42C26A31F63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.0eb2d3a472fd847ccbfea

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.0eb2d3a472fd847ccbfea

.exe 312KB

jaffacakes118_HEUR.Trojan.Win32.Generic.0eb2d3a472fd847ccbfea

IMPHASH 33b412eb0ccf59517cb6c9b4302ed662
SHA256 aa78d0cd257b138ca4f6bda149fcc448fa8b1fcae76ec13a7e89ce19ee228128
MD5 9f0e79527970eb2d3a472fd847ccbfea
SHA1 2a62a66f6f53c0433275191886893eafcd679953
SHA512 f30783c3da5a767f23a989304d5230badf1f6de5c57c610d044fd5af40270bc7bc060c9ed3f88f1172cb845c18a3c897b0aa7f55d2c8112b78280e85c5f7f7a6
SSDEEP 6144:dckBY74u2Zgu/oAOrJ5CiitIJo2ZxmjYftEB:dNY74/gH7oiitLZ8FEB
TLSH
T1E664BE2178D2C872D1B3193405F4A7712A7EB9614B389AEF57D40B7E4EB42C26A31F63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

29052

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc GetCurrentProcess RaiseException GetLastError ResetEvent PulseEvent GetNativeSystemInfo lstrlenA lstrlenW LoadLibraryW FindAtomA GetComputerNameW GetVersionExA FindFirstVolumeMountPointW SetThreadLocale SetConsoleMode AddConsoleAliasA WriteConsoleW GetConsoleCP FlushFileBuffers HeapSize SetFilePointerEx SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo CloseHandle SetEvent WaitForSingleObjectEx IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead TerminateProcess RtlUnwind FreeLibrary LoadLibraryExW HeapAlloc HeapFree HeapReAlloc ExitProcess GetModuleHandleExW GetModuleFileNameA GetStdHandle WriteFile GetACP ReadFile GetConsoleMode ReadConsoleW GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP CreateFileW

user32

DrawEdge DefFrameProcW DestroyCursor LoadCursorFromFileW SetWindowsHookW UpdateWindow SetMenuInfo LoadMenuW MapVirtualKeyA ReplyMessage PostMessageW DrawCaption

ole32

OleLoadFromStream

Sharing