jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]11b6eff4bd3d90904b34da9761455801

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.11b6eff4bd3d90904b34da9761455801
Size 296KB
Sample261013-2wp2eacw9x
SHA256 04090eb34fca0681c136ef29d7046d95165c11582fdf30a568972356d0636f08
MD5 11b6eff4bd3d90904b34da9761455801
SHA1 e3707183cfe7273703ba8e8ac4b2209a48903acf
SHA512 1932d8f93f025766a926e14851af15f49dc927e6747680ccefa1a6f8f2d9e43d9680ab529257cde9c91c5e11a400f3cc94c4e336c856f68ccb95cc12258b1a65
SSDEEP 3072:dr2DAj744jRwqVcsU3jV6DY9qamEPwr0MzwkT21eg+ToM3fDNUwcBUXxHOevNNBY:04jTVQ56Y9hfdIwkQeg+ToMPp3wegEjA
TLSH
T148548D03BBE8E27DE42609B15931821E963E7B2A3B3564CBF7F02D194E719D1C5B1391
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.11b6eff4bd3d90904b34da9761455801

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.11b6eff4bd3d90904b34da9761455801

.exe 296KB

jaffacakes118_HEUR.Trojan.Win32.Generic.11b6eff4bd3d90904b34da9761455801

IMPHASH 42dad48bd270bb09ddec1b628b1d6ed1
SHA256 04090eb34fca0681c136ef29d7046d95165c11582fdf30a568972356d0636f08
MD5 11b6eff4bd3d90904b34da9761455801
SHA1 e3707183cfe7273703ba8e8ac4b2209a48903acf
SHA512 1932d8f93f025766a926e14851af15f49dc927e6747680ccefa1a6f8f2d9e43d9680ab529257cde9c91c5e11a400f3cc94c4e336c856f68ccb95cc12258b1a65
SSDEEP 3072:dr2DAj744jRwqVcsU3jV6DY9qamEPwr0MzwkT21eg+ToM3fDNUwcBUXxHOevNNBY:04jTVQ56Y9hfdIwkQeg+ToMPp3wegEjA
TLSH
T148548D03BBE8E27DE42609B15931821E963E7B2A3B3564CBF7F02D194E719D1C5B1391
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

61894

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenW WriteFile LoadResource LeaveCriticalSection LocalFree EnterCriticalSection GetTickCount HeapAlloc GetVolumeInformationA GetACP CreateToolhelp32Snapshot ReadFile GetFileTime GetSystemDirectoryA Process32FirstW GetFileSize HeapReAlloc GetVersionExA GetTempPathA Process32NextW SetErrorMode CreateProcessA GetWindowsDirectoryW CreateProcessW GetExitCodeThread CreateThread CreateEventW TerminateThread SetEvent GetModuleFileNameW WaitForMultipleObjects FlushFileBuffers SetFilePointer SetStdHandle HeapFree CloseHandle MultiByteToWideChar FindResourceW lstrlenA LockResource CreateFileW SizeofResource FindResourceExW DeleteCriticalSection InitializeCriticalSection GetLastError GetProcessHeap WideCharToMultiByte WaitForSingleObject Sleep GetModuleFileNameA FormatMessageW SetEndOfFile SetEnvironmentVariableW SetEnvironmentVariableA CompareStringW CompareStringA GetConsoleMode GetConsoleCP WriteConsoleW GetConsoleOutputCP WriteConsoleA CreateFileA GetExitCodeProcess GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA LoadLibraryA HeapDestroy HeapSize RaiseException InterlockedExchange GetLocaleInfoA GetThreadLocale InterlockedIncrement InterlockedDecrement VirtualProtect VirtualAlloc GetProcAddress GetModuleHandleA GetSystemInfo VirtualQuery TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime DeleteFileW GetLocalTime ExitProcess GetCommandLineA GetStartupInfoA RtlUnwind GetStringTypeA GetStringTypeW GetCPInfo LCMapStringA LCMapStringW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree GetFileAttributesW GetOEMCP IsValidCodePage GetStdHandle SetHandleCount GetFileType

user32

GetActiveWindow GetKeyboardState UnregisterClassA

advapi32

OpenSCManagerW CloseServiceHandle CreateServiceW ChangeServiceConfig2W StartServiceW QueryServiceStatusEx RegisterServiceCtrlHandlerW SetServiceStatus RegQueryValueExW RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegCloseKey StartServiceCtrlDispatcherW

ole32

StringFromCLSID CoInitialize CoCreateInstance CoUninitialize CLSIDFromProgID

ws2_32

WSASocketW closesocket WSAStartup WSARecv WSACloseEvent WSAGetLastError WSACleanup WSASetEvent WSAGetOverlappedResult WSAResetEvent freeaddrinfo WSASend getaddrinfo WSAConnect WSAEnumNetworkEvents WSASetLastError WSACreateEvent WSAEventSelect