jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]197de298f56396f1c20d8fd5caca1632

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.197de298f56396f1c20d8fd5caca1632
Size 213KB
Sample261013-3ar5bacy41
SHA256 d483b421f4f8db6e8990c290bd828cc9d1a35437bf647b785a3762b124ef815f
MD5 197de298f56396f1c20d8fd5caca1632
SHA1 b6293260fb9d26336b99b188a21b83a4ece5fc69
SHA512 03df8dd937e287af2b33f8f31b18572968a6d1f107e25b1743e8dcd90b390581bddfb36725068f959f780e48785b411476734e6c6b2d96a0e25f591a116c1e79
SSDEEP 6144:86zBgZtPqOc2qj0XQyhBdAXhT+glC2MN6p:86zatPqOcPIt+XhTflMw
TLSH
T13424019245503E73C824ACFBD12FA7EAB11B8EEB0E978147C0813BC5A1F52D5929379D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.197de298f56396f1c20d8fd5caca1632

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.197de298f56396f1c20d8fd5caca1632

.exe 213KB

jaffacakes118_HEUR.Trojan.Win32.Generic.197de298f56396f1c20d8fd5caca1632

IMPHASH 85bbf9a8c3cb4041843afb6d5f09b49f
SHA256 d483b421f4f8db6e8990c290bd828cc9d1a35437bf647b785a3762b124ef815f
MD5 197de298f56396f1c20d8fd5caca1632
SHA1 b6293260fb9d26336b99b188a21b83a4ece5fc69
SHA512 03df8dd937e287af2b33f8f31b18572968a6d1f107e25b1743e8dcd90b390581bddfb36725068f959f780e48785b411476734e6c6b2d96a0e25f591a116c1e79
SSDEEP 6144:86zBgZtPqOc2qj0XQyhBdAXhT+glC2MN6p:86zatPqOcPIt+XhTflMw
TLSH
T13424019245503E73C824ACFBD12FA7EAB11B8EEB0E978147C0813BC5A1F52D5929379D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

127171

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Eeoeqoiotg\wMeAwJlEbwfrjF\pddvatafQU.pdb

user32

SetWindowLongW IsDialogMessageA ShowScrollBar WindowFromPoint GetScrollInfo DefWindowProcA LoadBitmapW HiliteMenuItem SetCaretPos GetClipCursor EndDialog MapWindowPoints MonitorFromRect SendMessageTimeoutA SetDlgItemInt GetKeyboardLayout VkKeyScanW GetMonitorInfoW GetMenuCheckMarkDimensions DrawAnimatedRects CopyRect TranslateMessage EnumWindows GetKeyboardType GetKeyNameTextW MessageBoxExA SetClassLongW AppendMenuW SetScrollPos CreateIconFromResource IsChild RegisterHotKey OemToCharA GetMenuItemID

kernel32

TransactNamedPipe SetFilePointer GlobalLock SetWaitableTimer lstrcatW LocalLock GetModuleHandleA ConnectNamedPipe MulDiv lstrlenW CopyFileW GetCommConfig CreateRemoteThread LocalAlloc GetCurrentDirectoryW lstrcmpiA GetFileType

gdi32

GetBkMode CreateBitmapIndirect SetViewportOrgEx GetROP2 PtInRegion IntersectClipRect GetDIBits ExtTextOutA EndPath DeleteDC CreateCompatibleBitmap GetFontData GetNearestPaletteIndex GetCurrentObject TextOutW BeginPath

advapi32

LookupPrivilegeValueA

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _amsg_exit _initterm _acmdln exit isspace fprintf _ismbblead wcsncmp sprintf towlower _XcptFilter _exit printf _cexit fflush wcscmp __setusermatherr strchr strncmp __getmainargs

Name

.text

Size

179KB

Virtual Size

178KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.diag_y

Size

512B

Virtual Size

68B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.diag_x

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idat

Size

512B

Virtual Size

388B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.div

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.plus

Size

1024B

Virtual Size

687B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.minus

Size

512B

Virtual Size

140B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.197de298f56396f1c20d8fd5caca1632

user32

kernel32

gdi32

advapi32

msvcrt

generic