jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]2bf99825b9daacab68a3f01d4060e1d2

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.2bf99825b9daacab68a3f01d4060e1d2
Size 92KB
Sample261014-a3c7mset7m
SHA256 8bf996aef7e81dacff4137b079107ef44f9fd61cc2f9029615e52c8dc9fdd433
MD5 2bf99825b9daacab68a3f01d4060e1d2
SHA1 e34bbab52bdc5ebb532e13f9ba20fbc98642d417
SHA512 f5f990fb37b5e99c520b72a6ae46dc2301efebefc480eb4db818c00960394a5fd2dc369fcdb4d0e7b9c5e76c51946cc2cc0c482f7ebc780608725f81e207ff09
SSDEEP 1536:uVZnxm6MG9xgfrvEaoiT/GyphjXDYjKwttoswRmhApE:+nxwgxgfR/DVG7wBpE
TLSH
T1B393BF69BF833F9BD0BE8C3659F3786C082835496E407C1B6AB4014B57B590E8F25A78
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.2bf99825b9daacab68a3f01d4060e1d2

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2bf99825b9daacab68a3f01d4060e1d2

.exe 92KB

jaffacakes118_HEUR.Trojan.Win32.Generic.2bf99825b9daacab68a3f01d4060e1d2

IMPHASH 3cba1ed6640987387f2c728a00db04c4
SHA256 8bf996aef7e81dacff4137b079107ef44f9fd61cc2f9029615e52c8dc9fdd433
MD5 2bf99825b9daacab68a3f01d4060e1d2
SHA1 e34bbab52bdc5ebb532e13f9ba20fbc98642d417
SHA512 f5f990fb37b5e99c520b72a6ae46dc2301efebefc480eb4db818c00960394a5fd2dc369fcdb4d0e7b9c5e76c51946cc2cc0c482f7ebc780608725f81e207ff09
SSDEEP 1536:uVZnxm6MG9xgfrvEaoiT/GyphjXDYjKwttoswRmhApE:+nxwgxgfR/DVG7wBpE
TLSH
T1B393BF69BF833F9BD0BE8C3659F3786C082835496E407C1B6AB4014B57B590E8F25A78
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4396

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.debug

Size

75KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

tufkvrp

Size

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

irvnwrq

Size

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

dfhkcvc

Size

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

mdogfly

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

jaffacakes118_HEUR.Trojan.Win32.Generic.2bf99825b9daacab68a3f01d4060e1d2

kernel32

user32

advapi32

shlwapi

generic