jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]0f7deb9c45d9ce73fe4dd541e4f6d3f9

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.0f7deb9c45d9ce73fe4dd541e4f6d3f9
Size 245KB
Sample261013-2py1qs118j
SHA256 95c82999bed4fdf0a2e299c31052a5eb3b1851aa51d7fbc70122cb9ee7bd551e
MD5 0f7deb9c45d9ce73fe4dd541e4f6d3f9
SHA1 2713ef24ad3c9fb0952682769fd6b82547c0a72d
SHA512 4ad0cfec93d9d74c714754778487713afeef9d546acca8f6aa8e41b71fc9f757465c5d3185cf55369168beb99eb416a7ded0892a896b87d33d760e2adce3dbf4
SSDEEP 6144:Svbb/bpCvvdHilA0gw908e3ZYUStzeDLXEoZ7eO:G7qdHilA2W3uUyzOH
TLSH
T10234123BDB09AE50ED3172320E3E8B369579B412E42C9D67EED49D0C1967A268670335
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.0f7deb9c45d9ce73fe4dd541e4f6d3f9

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.0f7deb9c45d9ce73fe4dd541e4f6d3f9

.exe 245KB

jaffacakes118_HEUR.Trojan.Win32.Generic.0f7deb9c45d9ce73fe4dd541e4f6d3f9

IMPHASH 8d4ceb1f706783866922ea540607ebdd
SHA256 95c82999bed4fdf0a2e299c31052a5eb3b1851aa51d7fbc70122cb9ee7bd551e
MD5 0f7deb9c45d9ce73fe4dd541e4f6d3f9
SHA1 2713ef24ad3c9fb0952682769fd6b82547c0a72d
SHA512 4ad0cfec93d9d74c714754778487713afeef9d546acca8f6aa8e41b71fc9f757465c5d3185cf55369168beb99eb416a7ded0892a896b87d33d760e2adce3dbf4
SSDEEP 6144:Svbb/bpCvvdHilA0gw908e3ZYUStzeDLXEoZ7eO:G7qdHilA2W3uUyzOH
TLSH
T10234123BDB09AE50ED3172320E3E8B369579B412E42C9D67EED49D0C1967A268670335
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathA GetModuleFileNameA SetFileAttributesA SetThreadPriority GetCurrentThread GetCurrentProcess SetPriorityClass GetEnvironmentVariableA FreeLibrary Sleep CreateMutexA DeleteFileA GetTickCount LoadLibraryA FindClose FindFirstFileA WinExec GetEnvironmentVariableW GetModuleFileNameW GetStartupInfoA OutputDebugStringA GetShortPathNameW MultiByteToWideChar GetWindowsDirectoryA CloseHandle GetLastError GetModuleHandleA GetProcAddress GetVersionExW

user32

MessageBoxA wsprintfW

advapi32

QueryServiceStatus RegQueryValueExA OpenServiceW OpenSCManagerW RegOpenKeyExW RegSetValueExA RegCloseKey CloseServiceHandle RegDeleteValueA RegCreateKeyExA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegOpenKeyExA

shell32

ShellExecuteExW ShellExecuteExA

msvcrt

_controlfp __set_app_type __p__fmode __p__commode sprintf malloc _except_handler3 ??3@YAXPAX@Z fwrite rand fclose fread ??2@YAPAXI@Z ftell fseek fopen __CxxFrameHandler _strlwr srand _access strncpy strrchr printf wcslen _exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv

Sharing