jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]1a8791dbbb63d5ebbb6c37f1eccd8621

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.1a8791dbbb63d5ebbb6c37f1eccd8621
Size 81KB
Sample261013-3efbbacy8w
SHA256 b3e17d3136976d985dcc16a9c567c39a153a3e015ea1fffe42eef14035dfeef5
MD5 1a8791dbbb63d5ebbb6c37f1eccd8621
SHA1 cc5217d3fd4c2e7a2613e134e5fe1de0cd6a41e4
SHA512 152f6e42f910833b1fb912b7c05a61e8d6abf8c82042e819d8408da492c682389335da8370076ca89d35a84f8285338d60aa23aa96e3c537e915c8bd4c329b3d
SSDEEP 1536:hWabmSLeCZNIEBTv72wtRmgYF/LaUXzRkcVoa15rj4WQpV7cntbzFEKPmP1Pq7Ov:hWaRhNIEdqeAawdx4WQpV7A3Fsui
TLSH
T1A9836C03EB4942D3D52E1A7451F90F1CE23495783B5E079B466CFA7AFA943D33A12398
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.1a8791dbbb63d5ebbb6c37f1eccd8621

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.1a8791dbbb63d5ebbb6c37f1eccd8621

.exe 81KB

jaffacakes118_HEUR.Trojan.Win32.Generic.1a8791dbbb63d5ebbb6c37f1eccd8621

IMPHASH d62efdc8f553b570aeba024f3fb14fd2
SHA256 b3e17d3136976d985dcc16a9c567c39a153a3e015ea1fffe42eef14035dfeef5
MD5 1a8791dbbb63d5ebbb6c37f1eccd8621
SHA1 cc5217d3fd4c2e7a2613e134e5fe1de0cd6a41e4
SHA512 152f6e42f910833b1fb912b7c05a61e8d6abf8c82042e819d8408da492c682389335da8370076ca89d35a84f8285338d60aa23aa96e3c537e915c8bd4c329b3d
SSDEEP 1536:hWabmSLeCZNIEBTv72wtRmgYF/LaUXzRkcVoa15rj4WQpV7cntbzFEKPmP1Pq7Ov:hWaRhNIEdqeAawdx4WQpV7A3Fsui
TLSH
T1A9836C03EB4942D3D52E1A7451F90F1CE23495783B5E079B466CFA7AFA943D33A12398
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

39181

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RegisterConsoleIME HeapSummary SetConsoleMode GetHandleContext GlobalAlloc IsSystemResumeAutomatic BaseFlushAppcompatCache GetProcessAffinityMask GetNamedPipeHandleStateA VirtualAlloc SetCalendarInfoW GlobalCompact GetComputerNameExW GetVersion LoadLibraryA

sqlunirl

_SetWindowsHookEx_@16 _OpenSemaphore_@12 _QueryServiceConfig_@16 _ObjectCloseAuditAlarm_@12 _strerror_@4 _EnumServicesStatus_@32 _OpenFileMapping_@12 _SendMessage@16 _CharUpper@4 _RegSetValueEx_@24 _CommConfigDialog_@12 _GetPrivateProfileStruct_@20 _RegDeleteValue_@8 _RegisterClass_@4

msvcp60

??Xstd@@YAAAV?$complex@M@0@AAV10@ABV10@@Z ??_7?$codecvt@GDH@std@@6B@ ?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z ?_Doraise@out_of_range@std@@MBEXXZ ??Gstd@@YA?AV?$complex@N@0@ABNABV10@@Z ?peek@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEGXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ??4?$complex@M@std@@QAEAAV01@ABV01@@Z ??_7?$basic_ofstream@GU?$char_traits@G@std@@@std@@6B@ ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z ??0?$moneypunct@D$00@std@@QAE@I@Z ??_Fcodecvt_base@std@@QAEXXZ ??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z ?_Getcat@?$moneypunct@G$0A@@std@@SAIXZ ?epsilon@?$numeric_limits@K@std@@SAKXZ

crtdll

_beep strtol _vsnprintf _ismbclegal isprint _mbctohira _getw _spawnvp _mbsnset _pgmptr_dll _mbsrchr strcpy fseek _eof ceil

Sharing