jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]1c0df787b18732c8fe2b8da184243858

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.1c0df787b18732c8fe2b8da184243858
Size 141KB
Sample261013-3mysmacz7w
SHA256 a5fc630626d85f50312bed52569171a5318155048f752a52e3f9a9d054a1d87d
MD5 1c0df787b18732c8fe2b8da184243858
SHA1 0308dc19b62b262612fa1fe35a394af661e37994
SHA512 5c7fc34e6c08b2cbfe70770741f5158fa196720f6e84253e3d6e1b5f1a1c523200864f7a5026acd4019942d2db27057468d28af2576835df2f9b954beef897d4
SSDEEP 1536:VA0EyU1ruwOEp4AH0hVjUhXRX5kDtitND6b031oX4wG665VtV0LLz/eTfelQm4Dj:jE9NOESZjU2DsvD/39BJcD/eqaTkcJD
TLSH
T1F0E302625BD20A5EF1A44D387CE21BB98E3EBD4158358F8606A4703C6CB1682DCB6777
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.1c0df787b18732c8fe2b8da184243858

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.1c0df787b18732c8fe2b8da184243858

.exe 141KB

jaffacakes118_HEUR.Trojan.Win32.Generic.1c0df787b18732c8fe2b8da184243858

IMPHASH a3a750548031f194f676e9dcf5dd3cdb
SHA256 a5fc630626d85f50312bed52569171a5318155048f752a52e3f9a9d054a1d87d
MD5 1c0df787b18732c8fe2b8da184243858
SHA1 0308dc19b62b262612fa1fe35a394af661e37994
SHA512 5c7fc34e6c08b2cbfe70770741f5158fa196720f6e84253e3d6e1b5f1a1c523200864f7a5026acd4019942d2db27057468d28af2576835df2f9b954beef897d4
SSDEEP 1536:VA0EyU1ruwOEp4AH0hVjUhXRX5kDtitND6b031oX4wG665VtV0LLz/eTfelQm4Dj:jE9NOESZjU2DsvD/39BJcD/eqaTkcJD
TLSH
T1F0E302625BD20A5EF1A44D387CE21BB98E3EBD4158358F8606A4703C6CB1682DCB6777
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7664

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToSystemTime FreeEnvironmentStringsA GetCurrentProcess VirtualAlloc VirtualFree GetTimeFormatW OutputDebugStringA GetFileAttributesA GetCurrentDirectoryA GetModuleFileNameW SetEvent GetACP CreateMutexA GetModuleHandleA CreateFileA GetProcAddress lstrcpynA DosDateTimeToFileTime VirtualProtect GetThreadLocale GetStdHandle TerminateThread CreateFileMappingA SetHandleCount GetStartupInfoW GetLastError CloseHandle ExitThread LoadLibraryW GlobalAlloc GetEnvironmentStringsW GetConsoleMode EndUpdateResourceA lstrcpyW

msvcrt

_wcsnicmp strcmp __setusermatherr _wcmdln __CxxFrameHandler _wtoi strncpy wcstok toupper memcpy wcstol strtol towupper atoi wcscmp printf wcsrchr swscanf _XcptFilter wcsncpy _wcsicmp

user32

BeginPaint LoadCursorA GetProcessWindowStation SetCapture DialogBoxParamA MapWindowPoints ScreenToClient SendMessageW LoadMenuW SetScrollPos LoadCursorW CheckDlgButton LoadImageW GetParent DestroyWindow ReleaseDC IsWindow DispatchMessageW UnregisterClassW ClientToScreen CopyRect RegisterClassA ReleaseCapture wsprintfW GetCursorPos SendMessageA GetMenuItemCount

gdi32

CreateFontIndirectW SetBkMode PatBlt CreateCompatibleDC RestoreDC CreateBitmap TranslateCharsetInfo Rectangle StretchBlt SetTextColor

shell32

CommandLineToArgvW ShellAboutW ShellExecuteW SHGetPathFromIDListW SHGetMalloc SHGetSpecialFolderLocation

Name

.text

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.crt

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

115B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

64KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

266B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.1c0df787b18732c8fe2b8da184243858

kernel32

msvcrt

user32

gdi32

shell32

generic