jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]21cc04fb3ccaf15c5082c0b66efe7665

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.21cc04fb3ccaf15c5082c0b66efe7665
Size 150KB
Sample261014-ac7cssds6s
SHA256 840c0d9d745f2bbb17c58daeb0b5e88325d53007e1d90e5b84f048896ca8be04
MD5 21cc04fb3ccaf15c5082c0b66efe7665
SHA1 368d540f2fe67dbcb785fd688ef11f36ec57cd8f
SHA512 23609edc6d2f01821391321a917b8f211ea6fe5a79eb6af66aa445a26dabeb283d614d2781e9f064fdaa6a1ac1342e9a4b88fca19325fe984ea1001a1e5279d3
SSDEEP 3072:tBT8x0ubLq5wIDamTYielZnZNaPcE9LFHqukkkkfkkkk4kkkZkk:tCx0uq5wqWienZNBE7kkkkfkkkk4kkkp
TLSH
T1B2E37DE8E7909E0CC8340ABD659AF3BA14FD7E311E13CA032151247F5DFE599887978A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.21cc04fb3ccaf15c5082c0b66efe7665

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.21cc04fb3ccaf15c5082c0b66efe7665

.dll 150KB

jaffacakes118_HEUR.Trojan.Win32.Generic.21cc04fb3ccaf15c5082c0b66efe7665

IMPHASH e5b230284b90b15ca10cfd4c971bed07
SHA256 840c0d9d745f2bbb17c58daeb0b5e88325d53007e1d90e5b84f048896ca8be04
MD5 21cc04fb3ccaf15c5082c0b66efe7665
SHA1 368d540f2fe67dbcb785fd688ef11f36ec57cd8f
SHA512 23609edc6d2f01821391321a917b8f211ea6fe5a79eb6af66aa445a26dabeb283d614d2781e9f064fdaa6a1ac1342e9a4b88fca19325fe984ea1001a1e5279d3
SSDEEP 3072:tBT8x0ubLq5wIDamTYielZnZNaPcE9LFHqukkkkfkkkk4kkkZkk:tCx0uq5wqWienZNBE7kkkkfkkkk4kkkp
TLSH
T1B2E37DE8E7909E0CC8340ABD659AF3BA14FD7E311E13CA032151247F5DFE599887978A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14242

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

dbg0sym3.p2d3b4

kernel32

LoadLibraryExW HeapSize SetHandleCount GetACP GetEnvironmentStringsW GetSystemInfo InterlockedCompareExchange InterlockedDecrement GetStartupInfoA SetLastError WideCharToMultiByte IsBadWritePtr LCMapStringA CreateFileMappingW GetStdHandle VirtualQuery WaitForSingleObject ConnectNamedPipe GetModuleHandleA CloseHandle GetVersionExA GetCurrentProcess Sleep GetTickCount LCMapStringW FreeEnvironmentStringsW lstrcatW CreateTimerQueueTimer InterlockedExchangeAdd FreeEnvironmentStringsA ResetEvent DeleteTimerQueueTimer OpenProcess VirtualAlloc IsBadReadPtr lstrcpyW CreateEventA ReleaseMutex GetSystemTimeAsFileTime CreateThread IsBadCodePtr GetEnvironmentStrings GetFileType GetCurrentThreadId HeapFree ExitProcess SetEvent DisconnectNamedPipe InterlockedIncrement RtlUnwind InitializeCriticalSection GetProcAddress DeleteCriticalSection CreateNamedPipeA HeapCreate SetUnhandledExceptionFilter WriteFile HeapDestroy CreateMutexW GetOEMCP VirtualFree GetCPInfo DuplicateHandle LoadLibraryA GetCommandLineA RaiseException GetLastError HeapAlloc QueryPerformanceCounter LeaveCriticalSection GetStringTypeA GetCurrentProcessId VirtualProtect GetLocaleInfoA EnterCriticalSection GetStringTypeW ReadFile MapViewOfFile GetModuleFileNameA MultiByteToWideChar InterlockedExchange TerminateProcess UnmapViewOfFile CopyFileA UnhandledExceptionFilter HeapReAlloc WaitForMultipleObjects

user32

wsprintfW

advapi32

SetSecurityDescriptorDacl InitializeSecurityDescriptor

Sharing