jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]2c4791a08200a99e3606d0e74e857d4e

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.2c4791a08200a99e3606d0e74e857d4e
Size 180KB
Sample261014-a4fddstt6m
SHA256 ca8807ee9652715cd53e37453e4410880f999139e109b936106bd85b3193d050
MD5 2c4791a08200a99e3606d0e74e857d4e
SHA1 070244a2f481c609c8fa5cbcb38d98c8ccc4a69b
SHA512 4fd95ab7e4337c6416d77c1f762d81521876dac4213ee0ffbd0c624dd963caeefed16476422353b5350a0b3a029de187e3176ad5ff717273d93d65edd13a7891
SSDEEP 3072:ab8RwSAdCJ92AN/UrTAGqr89YkrorpAzINOMR17nVn8q7idj5P/e:LRpBL2AN/Uvqr964pfkQ17deBA
TLSH
T14804F142D0B784CFFC018C7DD102A3AA867D6DF75451C2FBFB42279CE55A2CA949E9A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.2c4791a08200a99e3606d0e74e857d4e

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2c4791a08200a99e3606d0e74e857d4e

.exe 180KB

jaffacakes118_HEUR.Trojan.Win32.Generic.2c4791a08200a99e3606d0e74e857d4e

IMPHASH 93797a7b561b6f6a5ba16285916e0f5f
SHA256 ca8807ee9652715cd53e37453e4410880f999139e109b936106bd85b3193d050
MD5 2c4791a08200a99e3606d0e74e857d4e
SHA1 070244a2f481c609c8fa5cbcb38d98c8ccc4a69b
SHA512 4fd95ab7e4337c6416d77c1f762d81521876dac4213ee0ffbd0c624dd963caeefed16476422353b5350a0b3a029de187e3176ad5ff717273d93d65edd13a7891
SSDEEP 3072:ab8RwSAdCJ92AN/UrTAGqr89YkrorpAzINOMR17nVn8q7idj5P/e:LRpBL2AN/Uvqr964pfkQ17deBA
TLSH
T14804F142D0B784CFFC018C7DD102A3AA867D6DF75451C2FBFB42279CE55A2CA949E9A0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

22670

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

O:\lsfMaol\mexvxutl\RbymsdFE.pdb

Name

.text

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

142KB

Virtual Size

210KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.crt

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jaffacakes118_HEUR.Trojan.Win32.Generic.2c4791a08200a99e3606d0e74e857d4e

kernel32

gdi32

comctl32

ntdll

user32

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2c4791a08200a99e3606d0e74e857d4e

kernel32

gdi32

comctl32

ntdll

user32

generic