jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]11def5f375fdd3ff54943bc0da612d3b

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.11def5f375fdd3ff54943bc0da612d3b
Size 141KB
Sample261013-2xt2ravvgx
SHA256 b905dd84a00e32b19648b5444c353a722e81c170abeface75448a206c3f0653e
MD5 11def5f375fdd3ff54943bc0da612d3b
SHA1 df17e3ebfa1926783df59aa5bd7e679d5de300e6
SHA512 72951e39608429646c928925af7c946faf28d0b45711969a4f9dfce22ed520aefd0420ede52a84e99b8b7c370326898ac9697688aeebe6e257392d9f112d1690
SSDEEP 3072:CECAJhkdOP17s/qaOi08OwyHxcnZGCCXl11PllV1V:CEvgOP17s/F08OaoCC1vl1V
TLSH
T181E37D0336A1C931E14F217D9C689B25B3FAE5718F778943BB58061CAF75B829F22706
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.11def5f375fdd3ff54943bc0da612d3b

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.11def5f375fdd3ff54943bc0da612d3b

.dll 141KB

jaffacakes118_HEUR.Trojan.Win32.Generic.11def5f375fdd3ff54943bc0da612d3b

IMPHASH eebf3f1f7d0e9da18b8758054b5aaf19
SHA256 b905dd84a00e32b19648b5444c353a722e81c170abeface75448a206c3f0653e
MD5 11def5f375fdd3ff54943bc0da612d3b
SHA1 df17e3ebfa1926783df59aa5bd7e679d5de300e6
SHA512 72951e39608429646c928925af7c946faf28d0b45711969a4f9dfce22ed520aefd0420ede52a84e99b8b7c370326898ac9697688aeebe6e257392d9f112d1690
SSDEEP 3072:CECAJhkdOP17s/qaOi08OwyHxcnZGCCXl11PllV1V:CEvgOP17s/F08OaoCC1vl1V
TLSH
T181E37D0336A1C931E14F217D9C689B25B3FAE5718F778943BB58061CAF75B829F22706
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

76197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

WideCharToMultiByte RaiseException GetLastError InitializeCriticalSection DeleteCriticalSection SizeofResource LockResource LoadResource FindResourceA FindResourceExA lstrlenW lstrlenA MultiByteToWideChar GetModuleFileNameA GetVolumeInformationA ReadFile CreateFileA GetTickCount Sleep MoveFileA DeleteFileA CloseHandle GetFileSize CopyFileA CreateThread CreateMutexA SetEndOfFile FlushFileBuffers SetStdHandle GetVersionExA GetThreadLocale GetLocaleInfoA GetACP GetTempPathA InterlockedExchange IsBadCodePtr IsBadReadPtr LoadLibraryA GetStringTypeW GetStringTypeA WriteFile UnhandledExceptionFilter GetEnvironmentStringsW FreeEnvironmentStringsW EnterCriticalSection LeaveCriticalSection HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery ExitProcess RtlUnwind GetSystemTimeAsFileTime GetCurrentThreadId GetCommandLineA LCMapStringA LCMapStringW GetOEMCP GetCPInfo TlsAlloc SetLastError TlsFree TlsSetValue TlsGetValue GetProcAddress GetModuleHandleA HeapCreate VirtualFree IsBadWritePtr TerminateProcess GetCurrentProcess QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings

advapi32

RegSetValueExA RegQueryValueExA RegOpenKeyExA RegCloseKey RegCreateKeyExA

shell32

SHGetSpecialFolderPathA

ole32

CoInitialize CoCreateInstance

oleaut32

VariantClear SysFreeString VariantInit SysAllocStringLen

shlwapi

PathFileExistsA

urlmon

URLDownloadToFileA