jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]1ef1bf7c9c800a78324ed17db789b1aa

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.1ef1bf7c9c800a78324ed17db789b1aa
Size 48KB
Sample261013-3ytcaac19x
SHA256 ca1a2e842d9555b7f862af808fd6bfd7c7f8a43c13585a96b754c4ad79ede3f4
MD5 1ef1bf7c9c800a78324ed17db789b1aa
SHA1 8a34980c655f7c0000e1ea72edbfca3eb10bec0a
SHA512 83216a048a6b06e9aa88cea62e62b5c0a5c1c72381bb6c335bff0fd5d191d4d23f6cf8c94381443eb21198bbeb8d123998777d038a497c79e63cd3381c8f09fe
SSDEEP 768:m4iZTK++QjZYEShg0HpnG3cBSv6WvU48TZS59USdcXQP8pK7y+:cZGZKzB0HlbBSv6Ws48s59USmXDE7
TLSH
T1ED237B127691C2F3C7E24734B65A5A5A3FF9BC114D801813D7A2B7AE3DF02929F7A205
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.1ef1bf7c9c800a78324ed17db789b1aa

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.1ef1bf7c9c800a78324ed17db789b1aa

.dll 48KB

jaffacakes118_HEUR.Trojan.Win32.Generic.1ef1bf7c9c800a78324ed17db789b1aa

IMPHASH 97c04e4d31e6680215e1f12f61328cb8
SHA256 ca1a2e842d9555b7f862af808fd6bfd7c7f8a43c13585a96b754c4ad79ede3f4
MD5 1ef1bf7c9c800a78324ed17db789b1aa
SHA1 8a34980c655f7c0000e1ea72edbfca3eb10bec0a
SHA512 83216a048a6b06e9aa88cea62e62b5c0a5c1c72381bb6c335bff0fd5d191d4d23f6cf8c94381443eb21198bbeb8d123998777d038a497c79e63cd3381c8f09fe
SSDEEP 768:m4iZTK++QjZYEShg0HpnG3cBSv6WvU48TZS59USdcXQP8pK7y+:cZGZKzB0HlbBSv6Ws48s59USmXDE7
TLSH
T1ED237B127691C2F3C7E24734B65A5A5A3FF9BC114D801813D7A2B7AE3DF02929F7A205
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

29193

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetSystemDirectoryA DisableThreadLibraryCalls InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection InterlockedIncrement EnterCriticalSection InterlockedDecrement HeapAlloc GetSystemInfo GetVersionExA HeapCreate HeapDestroy GetShortPathNameA GetModuleHandleA GetWindowsDirectoryA DeleteFileA WritePrivateProfileStringA CloseHandle GetLastError CreateEventA GetCurrentProcessId GetLocalTime GetCommandLineW Process32Next Process32First lstrlenA MultiByteToWideChar lstrlenW WideCharToMultiByte CreateThread Sleep LoadLibraryA GetModuleFileNameA GetProcAddress

user32

SetWindowTextA SendMessageA GetMessageA TranslateMessage DispatchMessageA SetTimer PostMessageA DefWindowProcA CallNextHookEx IsWindow CreateWindowExA ShowWindow FindWindowExA RegisterClassExA KillTimer

advapi32

RegQueryValueExA RegOpenKeyExA RegSetValueExA RegCreateKeyExA RegCloseKey

shell32

CommandLineToArgvW

ole32

CoCreateInstance

oleaut32

SysStringLen LoadRegTypeLi SysAllocString VariantClear SysFreeString

msvcrt

strrchr _access _stricmp memcmp memset _purecall ??2@YAPAXI@Z free _initterm malloc _adjust_fdiv _strlwr strcat strchr fopen fwrite fclose strcpy strstr strcmp ??3@YAXPAX@Z sprintf rand memcpy strlen

Sharing