jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]1aa3de4ab21eaebea5200929cf9d4d6e

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.1aa3de4ab21eaebea5200929cf9d4d6e
Size 88KB
Sample261013-3e89dssv6p
SHA256 5585b64c6c9ad86697fcd480f4b1b808a7883dec7fb917b44a987b9ecb074acb
MD5 1aa3de4ab21eaebea5200929cf9d4d6e
SHA1 44f83a8b3d9539fd3aed58e1cbb4df96f1af4b46
SHA512 1d4c26c557c4c13ff8563e3726c020186f288a7fd7ff72981b07c78a85dcdbf3642e4a28220b20ead9e898cb22f9bbb61afc8f05d33f5715cf3f5134b5a95557
SSDEEP 1536:eLDPJF1JWJVV5nCT6k+8u/g2tCYjZPl/3wmHv/L/V/3/LcoCrjxcnaaadY:ebUzVcTo8uUY9N/35jtPwHbY
TLSH
T12D936D03EB490383E56F1B3005BE0F19E7319A387B56178B566CBB79ED903D26A13399
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.1aa3de4ab21eaebea5200929cf9d4d6e

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.1aa3de4ab21eaebea5200929cf9d4d6e

.exe 88KB

jaffacakes118_HEUR.Trojan.Win32.Generic.1aa3de4ab21eaebea5200929cf9d4d6e

IMPHASH b00c1c4a02a7d596ae34511d86a29102
SHA256 5585b64c6c9ad86697fcd480f4b1b808a7883dec7fb917b44a987b9ecb074acb
MD5 1aa3de4ab21eaebea5200929cf9d4d6e
SHA1 44f83a8b3d9539fd3aed58e1cbb4df96f1af4b46
SHA512 1d4c26c557c4c13ff8563e3726c020186f288a7fd7ff72981b07c78a85dcdbf3642e4a28220b20ead9e898cb22f9bbb61afc8f05d33f5715cf3f5134b5a95557
SSDEEP 1536:eLDPJF1JWJVV5nCT6k+8u/g2tCYjZPl/3wmHv/L/V/3/LcoCrjxcnaaadY:ebUzVcTo8uUY9N/35jtPwHbY
TLSH
T12D936D03EB490383E56F1B3005BE0F19E7319A387B56178B566CBB79ED903D26A13399
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31055

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

psbase

SPGetProvParam SPGetSubtypeInfo SPCreateSubtype SPDeleteType SPEnumTypes SPReadItem SPReleaseContext SPAcquireContext SPProviderInitialize SPEnumItems SPEnumSubtypes SPCloseItem SPCreateType SPOpenItem SPDeleteItem SPSetProvParam SPDeleteSubtype SPWriteItem SPGetProvInfo FPasswordChangeNotify SPGetTypeInfo

kernel32

CancelTimerQueueTimer GetFileAttributesA LCMapStringA RegisterWowBaseHandlers GetCurrentThreadId LoadLibraryA WriteConsoleOutputCharacterW SystemTimeToTzSpecificLocalTime TlsGetValue MoveFileWithProgressA GetLastError VirtualAlloc FindAtomA GetConsoleInputExeNameW GetTickCount GetSystemTimeAsFileTime OpenFileMappingA RegisterWaitForSingleObjectEx QueryPerformanceCounter GetCurrentProcessId FillConsoleOutputCharacterA WriteProfileStringA HeapCreate GetStartupInfoA BuildCommDCBW CreateMailslotA GetBinaryType ExitVDM RegisterConsoleIME

msvcp60

?id@?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEGG@Z ?pword@ios_base@std@@QAEAAPAXH@Z ?do_tolower@?$ctype@D@std@@MBEPBDPADPBD@Z ??0bad_alloc@std@@QAE@PBD@Z ??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z ??0domain_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z ?get@?$messages@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@HHHABV32@@Z ?hash@?$collate@D@std@@QBEJPBD0@Z ?sinh@std@@YA?AV?$complex@M@1@ABV21@@Z ?ldexp@?$_Ctr@N@std@@SANNH@Z ?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIXZ ??1?$numpunct@G@std@@UAE@XZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A _LSinh ?length@?$codecvt@GDH@std@@QBEHAAHPBG1I@Z ??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z ?seekp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ??X?$_Complex_base@N@std@@QAEAAV01@ABN@Z

odbctrac

TraceSQLAllocStmt TraceSQLSetCursorNameW TraceSQLSetPos TraceSQLGetDescRec TraceSQLAllocEnv TraceSQLGetDescRecW TraceSQLFetchScroll TraceSQLGetDiagRecW TraceSQLSetEnvAttr TraceSQLColumnPrivileges TraceSQLBrowseConnect TraceSQLBindParameter TraceSQLGetCursorNameW TraceSQLConnectW TraceSQLColAttributes TraceOpenLogFile TraceSQLAllocHandle TraceSQLGetEnvAttr TraceSQLNumParams TraceSQLGetInfoW TraceSQLSetStmtAttrW TraceSQLForeignKeysW TraceSQLBrowseConnectW TraceSQLTables

setupapi

SetupDiGetSelectedDriverA CM_Get_Res_Des_Data_Size SetupDiGetClassInstallParamsW SetupDiBuildClassInfoListExA SetupGetTargetPathW pSetupStringTableInitializeEx SetupInstallFromInfSectionW CM_Get_DevNode_Registry_PropertyW SetupCancelTemporarySourceList SetupRemoveFileLogEntryA SetupQuerySpaceRequiredOnDriveW SetupRenameErrorW SetupQueueRenameA pSetupStringTableAddStringEx CM_Get_Device_ID_ListW

rasadhlp

WSAttemptAutodialAddr WSAttemptAutodialName AcsHlpNbConnection WSNoteSuccessfulHostentLookup