jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]0ff71bbb1e1a8cd0185131a80d0292c6

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.0ff71bbb1e1a8cd0185131a80d0292c6
Size 250KB
Sample261013-2sgkvsvvbx
SHA256 124b4733262648311afab6205c01b564c978617692e2e67b244d29626d7c96c5
MD5 0ff71bbb1e1a8cd0185131a80d0292c6
SHA1 b13e574018a3be2d685be4be9b4c3c676c0c3a1c
SHA512 a91e3f00ddf246e8cbb1675a6aad3660d04db334ab0843498fdb53544ebe64a1f43fd601281510e0a2f5a14bad96bbd30d215b2ea5065d78fbd2dce2513dad98
SSDEEP 6144:uq6SQWzKUSaIFqdO9XYqXvnKSFKhoVmTVLf31Sp:wSQs/SjFxNYyVTVm11S
TLSH
T1D5441232C6DA1417F0270CBC01B3E9B736785E705AA726A348C69EBB7F5464E89F9443
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.0ff71bbb1e1a8cd0185131a80d0292c6

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.0ff71bbb1e1a8cd0185131a80d0292c6

.exe 250KB

jaffacakes118_HEUR.Trojan.Win32.Generic.0ff71bbb1e1a8cd0185131a80d0292c6

IMPHASH 4917038eb628638b5fe31e57d75903d9
SHA256 124b4733262648311afab6205c01b564c978617692e2e67b244d29626d7c96c5
MD5 0ff71bbb1e1a8cd0185131a80d0292c6
SHA1 b13e574018a3be2d685be4be9b4c3c676c0c3a1c
SHA512 a91e3f00ddf246e8cbb1675a6aad3660d04db334ab0843498fdb53544ebe64a1f43fd601281510e0a2f5a14bad96bbd30d215b2ea5065d78fbd2dce2513dad98
SSDEEP 6144:uq6SQWzKUSaIFqdO9XYqXvnKSFKhoVmTVLf31Sp:wSQs/SjFxNYyVTVm11S
TLSH
T1D5441232C6DA1417F0270CBC01B3E9B736785E705AA726A348C69EBB7F5464E89F9443
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20812

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

StrRetToStrW

kernel32

GetModuleFileNameW GetLastError CreateEventW GetThreadPriority GetWindowsDirectoryW GetVolumeInformationW ExpandEnvironmentStringsW GetFileAttributesW GetSystemDirectoryW GetVersionExW Sleep GetTempFileNameW GetProcessHeap IsDebuggerPresent GetCurrentProcessId GetCurrentThreadId InitializeCriticalSection GetCurrentThread GetTickCount GetLogicalDrives SetEvent WaitForSingleObject CreateDirectoryW SetErrorMode SetUnhandledExceptionFilter GetCurrentProcess QueryPerformanceCounter CreateMutexW GetProcAddress GetModuleHandleA

advapi32

RegEnumValueW GetUserNameW RegEnumKeyExW RegCloseKey RegOpenKeyExW StartServiceW RegOpenKeyW RegQueryValueExW OpenServiceW OpenSCManagerW CloseServiceHandle RegFlushKey

shell32

SHGetDesktopFolder SHGetFolderPathW

ole32

CoInitialize CoUninitialize

cfgmgr32

CM_Free_Log_Conf CM_Next_Range

user32

CharPrevA LoadImageW OpenClipboard MessageBoxIndirectA IsMenu SendDlgItemMessageA CharPrevW ShowCursor wsprintfA RegisterWindowMessageW GetKeyboardLayout EnumClipboardFormats GetDesktopWindow CreateAcceleratorTableW PeekMessageW GetDlgItemTextW GetWindowRgn wvsprintfA SetForegroundWindow CharUpperA GetMenuItemInfoW LoadCursorW wvsprintfW SetDlgItemTextA IsIconic InsertMenuA

gdi32

CreatePolyPolygonRgn AddFontResourceW RemoveFontResourceA CreateFontIndirectExW AddFontResourceA CreateICW CreateScalableFontResourceW RemoveFontResourceExA CreateMetaFileW CreateBitmap RemoveFontResourceExW CreatePolygonRgn SetEnhMetaFileBits CreateEllipticRgn CreateColorSpaceW

Name

.edata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

13KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.oUKQUW

Size

104KB

Virtual Size

112KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tQdRF

Size

109KB

Virtual Size

174KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.0ff71bbb1e1a8cd0185131a80d0292c6

shlwapi

kernel32

advapi32

shell32

ole32

cfgmgr32

user32

gdi32

generic