jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]11f2ce69d0dca39d0d2c837394851449

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.11f2ce69d0dca39d0d2c837394851449
Size 193KB
Sample261013-2yey8acx21
SHA256 6a432fbdb29154a9f2d01744389e64617c32e99fd62b1f67df294859e1850e66
MD5 11f2ce69d0dca39d0d2c837394851449
SHA1 714ae0a1481f39a5837333ba7bfb5940afdfa135
SHA512 0cbc158b8cf9d07287c58ce1a16fae388e07f1e96aff7ec9c57eea6002209c033bdf0926bc0d277e74bed09654f07bd6baf1d1c823d0747e59446670e6750091
SSDEEP 3072:hIKiSeyc+p/LDToSe0IBCFlMbyaYFSEvAMT6AIpYSdxZ38Wxn1DAYzR:n4ycMoSe0IMDM4FlviIMxZ35n10YzR
TLSH
T1671402D5F133CA4EF332A2786CCAD1648B6811D3B8660C5E6F9041FC26971A0F9B765D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.11f2ce69d0dca39d0d2c837394851449

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.11f2ce69d0dca39d0d2c837394851449

.exe 193KB

jaffacakes118_HEUR.Trojan.Win32.Generic.11f2ce69d0dca39d0d2c837394851449

IMPHASH bd9c6eb6a65072f1467a00b3215eed28
SHA256 6a432fbdb29154a9f2d01744389e64617c32e99fd62b1f67df294859e1850e66
MD5 11f2ce69d0dca39d0d2c837394851449
SHA1 714ae0a1481f39a5837333ba7bfb5940afdfa135
SHA512 0cbc158b8cf9d07287c58ce1a16fae388e07f1e96aff7ec9c57eea6002209c033bdf0926bc0d277e74bed09654f07bd6baf1d1c823d0747e59446670e6750091
SSDEEP 3072:hIKiSeyc+p/LDToSe0IBCFlMbyaYFSEvAMT6AIpYSdxZ38Wxn1DAYzR:n4ycMoSe0IMDM4FlviIMxZ35n10YzR
TLSH
T1671402D5F133CA4EF332A2786CCAD1648B6811D3B8660C5E6F9041FC26971A0F9B765D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19856

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mprapi

MprConfigServerConnect MprConfigServerDisconnect MprConfigGetFriendlyName

newdev

UpdateDriverForPlugAndPlayDevicesW

setupapi

SetupDiClassNameFromGuidW SetupDiEnumDeviceInfo SetupCloseInfFile SetupDiGetDeviceRegistryPropertyA SetupDiDestroyDeviceInfoList SetupDiSetDeviceRegistryPropertyW SetupGetInfFileListA SetupDiCreateDeviceInfoList SetupDiSetClassInstallParamsW SetupDiGetClassDevsA SetupDiGetDeviceInstanceIdW SetupOpenInfFileA SetupDiCallClassInstaller SetupDiBuildClassInfoList CMP_WaitNoPendingInstallEvents SetupDiGetClassDevsW SetupGetLineTextA SetupDiDeleteDeviceInfo SetupDiClassGuidsFromNameW SetupDiGetDeviceInstallParamsA SetupDiGetClassDescriptionW SetupDiGetDeviceRegistryPropertyW SetupDiCreateDeviceInfoA SetupCopyOEMInfW CM_Get_DevNode_Status

rpcrt4

NdrConformantArrayFree UuidCreate

iphlpapi

GetIpAddrTable

kernel32

ReadFile LoadLibraryExW GetAtomNameW SetFilePointer MultiByteToWideChar WriteFile GetWindowsDirectoryW WaitForSingleObject GetPrivateProfileStringW MulDiv EnumResourceNamesW GlobalAlloc FindNextFileW GetModuleHandleW GetProcAddress FreeLibrary GetExitCodeProcess WaitCommEvent FindClose DeleteFileW FindFirstFileW WritePrivateProfileStringW GlobalFree

Sharing