jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]2ba5f4a76f2660db8d1744ae316bdc77

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.2ba5f4a76f2660db8d1744ae316bdc77
Size 333KB
Sample261014-a2df1stt4m
SHA256 17bee2d9af5a1ff58f0bafa7206737535502b26623994555c644bd01c80dc467
MD5 2ba5f4a76f2660db8d1744ae316bdc77
SHA1 5d68147db4074f3349bb5e6186547b0d299fb927
SHA512 e8f07a04fd7b571c5b05e72525339601815cd4526d7104287822d061c4b49298c9f39d6275bba9d998798fc5649f2b65e33894e98df68472a608ecf5b3dd1ba2
SSDEEP 6144:ZV/2oKm8AE/HIF0q4ERL1LgjCViRqzbB1F4MomZyINuAELeWXLcLoR:Zx2BMEfP3ERxMCVgobafqyINuAEd7So
TLSH
T1FF74129773C561B9F1C6AB38B1036D9BD93DD2AFA43E8F4900B68DE7765B7009131888
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.2ba5f4a76f2660db8d1744ae316bdc77

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2ba5f4a76f2660db8d1744ae316bdc77

.exe 333KB

jaffacakes118_HEUR.Trojan.Win32.Generic.2ba5f4a76f2660db8d1744ae316bdc77

IMPHASH dbbd4b5b6bd133a87f2f0e970c4d77cf
SHA256 17bee2d9af5a1ff58f0bafa7206737535502b26623994555c644bd01c80dc467
MD5 2ba5f4a76f2660db8d1744ae316bdc77
SHA1 5d68147db4074f3349bb5e6186547b0d299fb927
SHA512 e8f07a04fd7b571c5b05e72525339601815cd4526d7104287822d061c4b49298c9f39d6275bba9d998798fc5649f2b65e33894e98df68472a608ecf5b3dd1ba2
SSDEEP 6144:ZV/2oKm8AE/HIF0q4ERL1LgjCViRqzbB1F4MomZyINuAELeWXLcLoR:Zx2BMEfP3ERxMCVgobafqyINuAEd7So
TLSH
T1FF74129773C561B9F1C6AB38B1036D9BD93DD2AFA43E8F4900B68DE7765B7009131888
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15577

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

DeleteObject SetBkMode SetTextAlign SetTextColor SetBkColor DeleteDC ExtTextOutW SelectObject CreateCompatibleDC

kernel32

GetModuleHandleA GetCommandLineW TlsAlloc GetConsoleKeyboardLayoutNameW GetTickCount FindAtomW GetTimeFormatW OpenFileMappingW UnmapViewOfFile MapViewOfFile FormatMessageW GetUserDefaultLCID Sleep CloseHandle GetLastError CreateFileMappingW LoadLibraryA LocalAlloc FoldStringW GetAtomNameW FreeLibrary LoadLibraryW GetSystemDirectoryW InitializeCriticalSection DeleteCriticalSection GetCurrentThreadId TlsGetValue GetProcAddress GetModuleHandleW TlsSetValue CreateMutexW ReleaseMutex WaitForSingleObject lstrlenW lstrcmpiW MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW GetModuleFileNameW CreateProcessW SetDllDirectoryW DeleteFileW GlobalFree AddAtomA AddAtomW TlsFree VirtualProtect QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetProcessHeap CreateProcessA GetTempFileNameA GetTempPathA HeapFree HeapAlloc InterlockedExchange InterlockedCompareExchange GetStartupInfoA TerminateProcess GetCurrentProcess RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP GetLocaleInfoW MulDiv GetVersionExA GetThreadLocale GetLocaleInfoA

oleaut32

DispGetIDsOfNames CreateErrorInfo OleCreateFontIndirect GetErrorInfo SetErrorInfo GetActiveObject VariantInit SysFreeString

shell32

SHGetFolderPathW CommandLineToArgvW ShellExecuteW

msimg32

TransparentBlt