jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]086052ea994b2e53e5160

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.086052ea994b2e53e5160
Size 193KB
Sample261013-akjayads5j
SHA256 4e11714d64024a190a9116abd0dea9d0515a6b4e3ad8abfff00c4e1eda1343be
MD5 07d39319d6b086052ea994b2e53e5160
SHA1 35a93d420f4d38a704c81669cb58f356dbecca53
SHA512 f00249d70e14a1038f9f3032cffaf7a85bd3976a4f4ba48506261315cff8a3a99351e325cb724ec8a564024b5317b0ff0dc3000a7716ee7fbc904fed5dfe0f4c
SSDEEP 6144:VMMYNXqBBNh0w7j8iLq/usDxnQy6Tga5mqMHhWZp:nnNhhj8BWsDxnX9aChWL
TLSH
T17814126773D2C86ADAA202710DB787F9E6B6FB94801FC3075785EEBB2CB96024D05185
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

installer

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.086052ea994b2e53e5160

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.086052ea994b2e53e5160

.exe 193KB

jaffacakes118_HEUR.Trojan.Win32.Generic.086052ea994b2e53e5160

IMPHASH e160ef8e55bb9d162da4e266afd9eef3
SHA256 4e11714d64024a190a9116abd0dea9d0515a6b4e3ad8abfff00c4e1eda1343be
MD5 07d39319d6b086052ea994b2e53e5160
SHA1 35a93d420f4d38a704c81669cb58f356dbecca53
SHA512 f00249d70e14a1038f9f3032cffaf7a85bd3976a4f4ba48506261315cff8a3a99351e325cb724ec8a564024b5317b0ff0dc3000a7716ee7fbc904fed5dfe0f4c
SSDEEP 6144:VMMYNXqBBNh0w7j8iLq/usDxnQy6Tga5mqMHhWZp:nnNhhj8BWsDxnX9aChWL
TLSH
T17814126773D2C86ADAA202710DB787F9E6B6FB94801FC3075785EEBB2CB96024D05185
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

12470

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA SearchPathA GetShortPathNameA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetEnvironmentVariableA GetWindowsDirectoryA GetTempPathA Sleep CloseHandle LoadLibraryA lstrlenA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA ReadFile lstrcpyA lstrcatA GetSystemDirectoryA GetVersion GetProcAddress GlobalAlloc CompareFileTime SetFileTime ExpandEnvironmentStringsA lstrcmpiA lstrcmpA WaitForSingleObject GlobalFree GetExitCodeProcess GetModuleHandleA SetErrorMode GetCommandLineA LoadLibraryExA FindFirstFileA FindNextFileA DeleteFileA SetFilePointer WriteFile FindClose WritePrivateProfileStringA MultiByteToWideChar MulDiv GetPrivateProfileStringA FreeLibrary

user32

CreateWindowExA EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard GetDC SystemParametersInfoA RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer GetDlgItem wsprintfA SetForegroundWindow ShowWindow IsWindow LoadImageA SetWindowLongA SetClipboardData EmptyClipboard OpenClipboard EndPaint PostQuitMessage FindWindowExA SendMessageTimeoutA SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegCloseKey RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegEnumValueA RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA