jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]1eada6fe71a2bcb037a3cd884cf69f8a

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.1eada6fe71a2bcb037a3cd884cf69f8a
Size 1.1MB
Sample261013-3yd8csvzdw
SHA256 359d216744d8bb228a2e134cbebdb225ad506b3697474ba1d757ffb89a7d6278
MD5 1eada6fe71a2bcb037a3cd884cf69f8a
SHA1 f9eb3745544fdd0566bde174a01b53edaa6d3c14
SHA512 6847efcf41137ccb627bcfd1a40bd7b187b7c64f912fb90b266880bcb2c43ea2a4ff72c8355b8d5a0ddc098b11ec57c7b301f546174295436bddae4f475b79c4
SSDEEP 24576:D64MVT7lDs5+efey8yO3uIIyhmD+qU+w3TKxLDCzUhybcYONtB0ZD:D64MT7lg5lewOnv+eTKxLmzKt2
TLSH
T15345236524CD9331C6288A7F10A7EB796568B7551B9110C73B2E96EE2E843C098373FF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.1eada6fe71a2bcb037a3cd884cf69f8a

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.1eada6fe71a2bcb037a3cd884cf69f8a

.exe 1.1MB

jaffacakes118_HEUR.Trojan.Win32.Generic.1eada6fe71a2bcb037a3cd884cf69f8a

IMPHASH 2b41fe54eab802d554dcf2e5a39a7f11
SHA256 359d216744d8bb228a2e134cbebdb225ad506b3697474ba1d757ffb89a7d6278
MD5 1eada6fe71a2bcb037a3cd884cf69f8a
SHA1 f9eb3745544fdd0566bde174a01b53edaa6d3c14
SHA512 6847efcf41137ccb627bcfd1a40bd7b187b7c64f912fb90b266880bcb2c43ea2a4ff72c8355b8d5a0ddc098b11ec57c7b301f546174295436bddae4f475b79c4
SSDEEP 24576:D64MVT7lDs5+efey8yO3uIIyhmD+qU+w3TKxLDCzUhybcYONtB0ZD:D64MT7lg5lewOnv+eTKxLmzKt2
TLSH
T15345236524CD9331C6288A7F10A7EB796568B7551B9110C73B2E96EE2E843C098373FF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7776

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryW GetModuleFileNameW CreateFileW GetProcAddress CloseHandle GetWindowsDirectoryW LocalFree lstrcpyW GetLastError HeapFree HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue GetSystemDirectoryW TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetModuleHandleW CreateDirectoryW LoadResource FreeLibrary TlsAlloc FindResourceW

user32

SendMessageW FindWindowW

shlwapi

StrCpyW PathFileExistsW PathRemoveFileSpecW PathAppendW

advapi32

AllocateAndInitializeSid SetSecurityInfo SetEntriesInAclW FreeSid GetSecurityInfo

Sharing