jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]10c6f27aa0e2edbe723c6e872a8b52c8

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.10c6f27aa0e2edbe723c6e872a8b52c8
Size 112KB
Sample261013-2vbgmads9m
SHA256 93e0597816ea07b2e840af371d6e6098c60673109e4fa77f3a0712875c61fcaf
MD5 10c6f27aa0e2edbe723c6e872a8b52c8
SHA1 3f8e4795301fc86b10c2e4cd636f2183dc9af37d
SHA512 1975f8841df54570b3716123ecb2f248edb2fa7caa9a2ff2965970780d60ccccdab5c6798f53f835067264dc0f85870b3b567b52998eddf5d5acfe594934b42a
SSDEEP 1536:mddKMvIU2R8UQYZ5AYG9gcDPWug28t73cHpQ7xLg2L4UFbaAgEkQCdK:SMMvSR8UQY7AngfzdZMQJg2JbqEkw
TLSH
T1FDB3D0118622A02BE07B887537E2F7D9F939AB385050CACB3681178CBC5E0D25D7F56E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.10c6f27aa0e2edbe723c6e872a8b52c8

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.10c6f27aa0e2edbe723c6e872a8b52c8

.exe 112KB

jaffacakes118_HEUR.Trojan.Win32.Generic.10c6f27aa0e2edbe723c6e872a8b52c8

IMPHASH 3e055a113b16b3b0d84ab05c6b638a6f
SHA256 93e0597816ea07b2e840af371d6e6098c60673109e4fa77f3a0712875c61fcaf
MD5 10c6f27aa0e2edbe723c6e872a8b52c8
SHA1 3f8e4795301fc86b10c2e4cd636f2183dc9af37d
SHA512 1975f8841df54570b3716123ecb2f248edb2fa7caa9a2ff2965970780d60ccccdab5c6798f53f835067264dc0f85870b3b567b52998eddf5d5acfe594934b42a
SSDEEP 1536:mddKMvIU2R8UQYZ5AYG9gcDPWug28t73cHpQ7xLg2L4UFbaAgEkQCdK:SMMvSR8UQY7AngfzdZMQJg2JbqEkw
TLSH
T1FDB3D0118622A02BE07B887537E2F7D9F939AB385050CACB3681178CBC5E0D25D7F56E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19259

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\zaEehXGV\RMChk\przxamrK\lSMH.pdb

Name

.text

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

115B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.temp

Size

76KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.crt

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jaffacakes118_HEUR.Trojan.Win32.Generic.10c6f27aa0e2edbe723c6e872a8b52c8

comctl32

gdi32

user32

shlwapi

kernel32

comdlg32

generic