jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]1ab4efe2141094d863c9cad2d90fad25

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.1ab4efe2141094d863c9cad2d90fad25
Size 141KB
Sample261013-3fjp5adf97
SHA256 a8bad926239398750d9728ae4bfdde80c8a71ed58551575698933e48aa60895b
MD5 1ab4efe2141094d863c9cad2d90fad25
SHA1 57b1bd159be5f0d913e441ef19b1af38b0c489ac
SHA512 dfe6a46965db2fb3a5bd00e0037d1128c1d9f406b4c0c08854e75ec47823dbe7141c57c54ee36bcc42e008a49c09ff64ee285bc44f10b0649f4b509a4b9d107e
SSDEEP 3072:sECAJhkdOP17s/qaOi08OwyHxcnZGCCXl11PllV1V:sEvgOP17s/F08OaoCC1vl1V
TLSH
T102E37D0336A1C931E14F217D9C689B25B3FAE5718F778943BB58061CAF75B829F22706
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.1ab4efe2141094d863c9cad2d90fad25

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.1ab4efe2141094d863c9cad2d90fad25

.dll 141KB

jaffacakes118_HEUR.Trojan.Win32.Generic.1ab4efe2141094d863c9cad2d90fad25

IMPHASH eebf3f1f7d0e9da18b8758054b5aaf19
SHA256 a8bad926239398750d9728ae4bfdde80c8a71ed58551575698933e48aa60895b
MD5 1ab4efe2141094d863c9cad2d90fad25
SHA1 57b1bd159be5f0d913e441ef19b1af38b0c489ac
SHA512 dfe6a46965db2fb3a5bd00e0037d1128c1d9f406b4c0c08854e75ec47823dbe7141c57c54ee36bcc42e008a49c09ff64ee285bc44f10b0649f4b509a4b9d107e
SSDEEP 3072:sECAJhkdOP17s/qaOi08OwyHxcnZGCCXl11PllV1V:sEvgOP17s/F08OaoCC1vl1V
TLSH
T102E37D0336A1C931E14F217D9C689B25B3FAE5718F778943BB58061CAF75B829F22706
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

76197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

WideCharToMultiByte RaiseException GetLastError InitializeCriticalSection DeleteCriticalSection SizeofResource LockResource LoadResource FindResourceA FindResourceExA lstrlenW lstrlenA MultiByteToWideChar GetModuleFileNameA GetVolumeInformationA ReadFile CreateFileA GetTickCount Sleep MoveFileA DeleteFileA CloseHandle GetFileSize CopyFileA CreateThread CreateMutexA SetEndOfFile FlushFileBuffers SetStdHandle GetVersionExA GetThreadLocale GetLocaleInfoA GetACP GetTempPathA InterlockedExchange IsBadCodePtr IsBadReadPtr LoadLibraryA GetStringTypeW GetStringTypeA WriteFile UnhandledExceptionFilter GetEnvironmentStringsW FreeEnvironmentStringsW EnterCriticalSection LeaveCriticalSection HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery ExitProcess RtlUnwind GetSystemTimeAsFileTime GetCurrentThreadId GetCommandLineA LCMapStringA LCMapStringW GetOEMCP GetCPInfo TlsAlloc SetLastError TlsFree TlsSetValue TlsGetValue GetProcAddress GetModuleHandleA HeapCreate VirtualFree IsBadWritePtr TerminateProcess GetCurrentProcess QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings

advapi32

RegSetValueExA RegQueryValueExA RegOpenKeyExA RegCloseKey RegCreateKeyExA

shell32

SHGetSpecialFolderPathA

ole32

CoInitialize CoCreateInstance

oleaut32

VariantClear SysFreeString VariantInit SysAllocStringLen

shlwapi

PathFileExistsA

urlmon

URLDownloadToFileA