jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]0f98379f682540491483b1184fb501e5

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.0f98379f682540491483b1184fb501e5
Size 295KB
Sample261013-2qnamacw21
SHA256 5a2322c3a9a59fd8ea2560280afe1ace344a634252291711e6fb186cc0c7f263
MD5 0f98379f682540491483b1184fb501e5
SHA1 8b9b56509fc241fa702e9badd699f974b4b4238c
SHA512 624a33284f572efd131078de79a36d6d0c1468fde73886a423a4f0e53cbc106d338c0ccf3f0145b6626c58ae1982aea657b90841176c6788c5ce0fbd3f30eaa9
SSDEEP 6144:pO3f4O68raT/pGRFafXRK0oRA1xcofczfiwdFi57CgP:pQ68mRbfhHqi/fQKW+Cg
TLSH
T1D6545B22BB90D472E58211715FABD7AA6A7EF6351F6500C3BBC40B2E6D381D00E3975B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.0f98379f682540491483b1184fb501e5

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.0f98379f682540491483b1184fb501e5

.exe 295KB

jaffacakes118_HEUR.Trojan.Win32.Generic.0f98379f682540491483b1184fb501e5

IMPHASH 1412faa0c91e446df00dc91d59c65bda
SHA256 5a2322c3a9a59fd8ea2560280afe1ace344a634252291711e6fb186cc0c7f263
MD5 0f98379f682540491483b1184fb501e5
SHA1 8b9b56509fc241fa702e9badd699f974b4b4238c
SHA512 624a33284f572efd131078de79a36d6d0c1468fde73886a423a4f0e53cbc106d338c0ccf3f0145b6626c58ae1982aea657b90841176c6788c5ce0fbd3f30eaa9
SSDEEP 6144:pO3f4O68raT/pGRFafXRK0oRA1xcofczfiwdFi57CgP:pQ68mRbfhHqi/fQKW+Cg
TLSH
T1D6545B22BB90D472E58211715FABD7AA6A7EF6351F6500C3BBC40B2E6D381D00E3975B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5119

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeviceIoControl GetComputerNameA FindFirstFileA FindClose GetTickCount GetComputerNameW CreateFileW WriteConsoleW GetVersionExA LoadLibraryW HeapReAlloc RtlUnwind GetConsoleMode GetConsoleCP QueryPerformanceCounter GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameW GetStdHandle ExitProcess HeapSize GetStringTypeW IsProcessorFeaturePresent LCMapStringW SetLastError GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc IsValidCodePage GetOEMCP GetCPInfo RaiseException GetStartupInfoW HeapSetInformation GetCommandLineA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetSystemTimeAsFileTime DecodePointer EncodePointer GetACP GetDriveTypeA GetCurrentProcess FlushFileBuffers SetEndOfFile Sleep CreateFileA TerminateProcess GetVersion GetCurrentProcessId GetLastError SetFileTime GetFileTime GetSystemDirectoryA WriteFile ReadFile SetFilePointer GetFileSize CloseHandle WaitForSingleObject CreateSemaphoreA FreeLibrary GetProcAddress LeaveCriticalSection LoadLibraryA EnterCriticalSection DeleteCriticalSection HeapDestroy InitializeCriticalSection HeapCreate HeapFree HeapAlloc MultiByteToWideChar WideCharToMultiByte lstrlenA InterlockedDecrement InterlockedIncrement OutputDebugStringA GetCurrentThreadId GetModuleHandleA SetStdHandle GetModuleFileNameA

user32

GetMessageA wsprintfA LoadStringA TranslateMessage GetKeyboardLayout MapVirtualKeyExA MapVirtualKeyA EnumDisplaySettingsA wsprintfW GetKeyNameTextA DispatchMessageA

advapi32

RegDeleteKeyA RegDeleteValueA RegEnumValueA RegEnumKeyExA RegQueryValueExA RegOpenKeyExA RegCloseKey RegSetValueExA RegCreateKeyExA GetUserNameA

ole32

CoUninitialize CoCreateInstance CoInitialize

oleaut32

SysFreeString VariantInit VariantClear SysAllocStringLen SysAllocString