jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]1a054b65e2b8d0ab29b304bf04c75fc4

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.1a054b65e2b8d0ab29b304bf04c75fc4
Size 243KB
Sample261013-3bv8cssv4j
SHA256 67f377dda34ec312c44f200bbe55c35e49d4711ef202e849c608453344627ca8
MD5 1a054b65e2b8d0ab29b304bf04c75fc4
SHA1 86a3d6e0efa825bfee9830f58bf5efea245859d6
SHA512 621366ab6e97ed8e3f9c34fc879198f5af33be135c0b6a0ee11fbc2e9b253f96f95f26e440a42e55b5188592814071d525a700ec5ca699debb3028adb75b7299
SSDEEP 3072:Kh8XSlGD7U4Iei5wGle3qK/XKdVFl2li0LZFbCkcU1byBttYm1CywVbBOh:Kh+SAXOeaKulKi0NFWkclBxCy0m
TLSH
T1CA34BE23B382E5F3F54904B5895A8FF054AB7A32506190CBBFE00F9E96756D18F6A703
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.1a054b65e2b8d0ab29b304bf04c75fc4

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.1a054b65e2b8d0ab29b304bf04c75fc4

.exe 243KB

jaffacakes118_HEUR.Trojan.Win32.Generic.1a054b65e2b8d0ab29b304bf04c75fc4

IMPHASH 6a85f0e41f6b0a70c75c0fa9db88ba77
SHA256 67f377dda34ec312c44f200bbe55c35e49d4711ef202e849c608453344627ca8
MD5 1a054b65e2b8d0ab29b304bf04c75fc4
SHA1 86a3d6e0efa825bfee9830f58bf5efea245859d6
SHA512 621366ab6e97ed8e3f9c34fc879198f5af33be135c0b6a0ee11fbc2e9b253f96f95f26e440a42e55b5188592814071d525a700ec5ca699debb3028adb75b7299
SSDEEP 3072:Kh8XSlGD7U4Iei5wGle3qK/XKdVFl2li0LZFbCkcU1byBttYm1CywVbBOh:Kh+SAXOeaKulKi0NFWkclBxCy0m
TLSH
T1CA34BE23B382E5F3F54904B5895A8FF054AB7A32506190CBBFE00F9E96756D18F6A703
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

40512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

EnableWindow GetMenuDefaultItem MapVirtualKeyExA GetAltTabInfoA DialogBoxParamA GetDCEx IsHungAppWindow ReleaseCapture ScrollDC GetScrollBarInfo HiliteMenuItem ScrollWindowEx

gdi32

SetBrushOrgEx SetWorldTransform GetBoundsRect SetPixelV GetTextMetricsW ArcTo GetTextFaceA SetMapMode SetDIBColorTable GetEnhMetaFileHeader SetROP2 SetPaletteEntries WidenPath GetMetaFileBitsEx CopyMetaFileW ModifyWorldTransform GetPath

comctl32

PropertySheetW CreateStatusWindowW CreatePropertySheetPageW CreateToolbarEx ImageList_ReplaceIcon ImageList_Add InitCommonControlsEx ImageList_Destroy ImageList_DrawEx ImageList_Create

kernel32

GetStringTypeA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings SetHandleCount LCMapStringA WriteConsoleA GetConsoleOutputCP CreateFileA GetFileSizeEx SetPriorityClass ClearCommBreak GetTapeStatus GetFileAttributesExW GetCommandLineA InitAtomTable GetProcessAffinityMask EraseTape LocalShrink SetEnvironmentVariableA SetEndOfFile ReadConsoleW GetTimeZoneInformation WriteConsoleW SetStdHandle SetFilePointerEx LCMapStringW CompareStringW TlsGetValue GetProcAddress GetVersion LocalFree OpenProcess GetCurrentProcess ExitThread GetLastError SetErrorMode InitializeCriticalSection Sleep GetFileSize GetStdHandle WriteFile GetFileTime CloseHandle FileTimeToLocalFileTime FileTimeToSystemTime FormatMessageA MapViewOfFile UnmapViewOfFile lstrlenW TlsAlloc TlsSetValue CreateFileMappingW LoadLibraryW GetModuleFileNameW CreateProcessW SetEnvironmentVariableW ExpandEnvironmentStringsW GetWindowsDirectoryW GetFullPathNameW CreateFileW GetLocaleInfoW GetTimeFormatW GetDateFormatW GetNumberFormatW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetFileAttributesW FindFirstFileW GetPrivateProfileStringW FreeLibrary LoadLibraryExW ReadFile GetModuleHandleW MultiByteToWideChar FindClose FindNextFileW LeaveCriticalSection CreateThread GetExitCodeThread SetEvent WaitForSingleObject WaitForMultipleObjects CreateEventW MulDiv GetTickCount GlobalAddAtomW FormatMessageW LocalAlloc GetCommandLineW LockResource HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap EnterCriticalSection LoadResource SizeofResource FindResourceW FindResourceExW GlobalAlloc GlobalReAlloc GlobalLock GlobalUnlock TerminateThread Module32FirstW Module32NextW DeleteCriticalSection GetSystemTime GetSystemTimeAsFileTime SystemTimeToFileTime IsBadStringPtrW SetLastError OpenEventW ReadProcessMemory lstrcmpW lstrcmpiW GetEnvironmentVariableW VirtualQueryEx lstrlenA IsDebuggerPresent RtlUnwind EncodePointer IsProcessorFeaturePresent GetCurrentThreadId ExitProcess GetModuleHandleExW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsFree GetStartupInfoW IsValidCodePage GetACP GetOEMCP GetCPInfo GetStringTypeW GetFileType FlushFileBuffers GetConsoleCP GetConsoleMode GetEnvironmentStringsW FreeEnvironmentStringsW LoadLibraryA ExpandEnvironmentStringsA GetSystemInfo InitializeCriticalSectionAndSpinCount RaiseException DecodePointer WideCharToMultiByte GetCurrentDirectoryW GetDriveTypeW OutputDebugStringW DuplicateHandle DeviceIoControl GetProcessWorkingSetSize VirtualFree VirtualAlloc GetComputerNameW PulseEvent GetProcessId TerminateProcess SetProcessWorkingSetSize GlobalMemoryStatus GetCurrentProcessId IsBadReadPtr QueryPerformanceFrequency QueryPerformanceCounter ResetEvent Thread32Next Thread32First ResumeThread SuspendThread GetThreadContext OpenThread SearchPathW DeleteFileW GetSystemDirectoryW SetFilePointer SetThreadAffinityMask GetCurrentThread InterlockedIncrement InterlockedDecrement GetStartupInfoA GetModuleHandleA HeapCreate GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale

Name

.text

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.textv

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

math

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

log

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

text

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.textdp

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

71KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.1a054b65e2b8d0ab29b304bf04c75fc4

user32

gdi32

comctl32

kernel32

generic