jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]20fdbe753e8805437f927b05c1e09452

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.20fdbe753e8805437f927b05c1e09452
Size 48KB
Sample261014-aceyjsv1as
SHA256 4e9aa70fe6fef9b373ccc4c919fcca9fea007b094a13b1d1963aad5bd121bf74
MD5 20fdbe753e8805437f927b05c1e09452
SHA1 583e05e4dbd7e292d0c7a50296679ec1be493e29
SHA512 99584f8a4e038f8f253db5f97c7d84dc918d7e5fccc53b719b6cdcebfc6a42bfcec112f47e1ff7c29b692b7113d204c78d0b485c8ddaf0f4e15bfab4c2e91a34
SSDEEP 768:WPsIziGUaheDtLC6/VdB08AfZFSCFtgE9budXpNOoFK5F0qTUMi2q:ZIziGUaUDVCyr2eEnydXpNOoFdqTp
TLSH
T12A236C112562C2EBD7E29230B66B6F263FF6BC250C8418179372BB9D3DF15529F79208
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.20fdbe753e8805437f927b05c1e09452

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.20fdbe753e8805437f927b05c1e09452

.dll 48KB

jaffacakes118_HEUR.Trojan.Win32.Generic.20fdbe753e8805437f927b05c1e09452

IMPHASH 90d194ef47520614adeaf0633c5a4608
SHA256 4e9aa70fe6fef9b373ccc4c919fcca9fea007b094a13b1d1963aad5bd121bf74
MD5 20fdbe753e8805437f927b05c1e09452
SHA1 583e05e4dbd7e292d0c7a50296679ec1be493e29
SHA512 99584f8a4e038f8f253db5f97c7d84dc918d7e5fccc53b719b6cdcebfc6a42bfcec112f47e1ff7c29b692b7113d204c78d0b485c8ddaf0f4e15bfab4c2e91a34
SSDEEP 768:WPsIziGUaheDtLC6/VdB08AfZFSCFtgE9budXpNOoFK5F0qTUMi2q:ZIziGUaUDVCyr2eEnydXpNOoFdqTp
TLSH
T12A236C112562C2EBD7E29230B66B6F263FF6BC250C8418179372BB9D3DF15529F79208
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

29229

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

Process32Next Process32First GetLastError DeleteFileA Sleep CreateThread WideCharToMultiByte lstrlenW MultiByteToWideChar lstrlenA WritePrivateProfileStringA CreateEventA DisableThreadLibraryCalls CloseHandle DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InterlockedDecrement HeapAlloc GetSystemInfo GetVersionExA HeapCreate HeapDestroy GetShortPathNameA GetModuleHandleA GetWindowsDirectoryA GetSystemDirectoryA GetCommandLineW GetCurrentProcessId GetLocalTime LoadLibraryA GetProcAddress InterlockedIncrement InitializeCriticalSection GetModuleFileNameA

user32

CallNextHookEx FindWindowExA CreateWindowExA ShowWindow IsWindow SendMessageA KillTimer SetTimer PostMessageA DefWindowProcA RegisterClassExA GetMessageA TranslateMessage DispatchMessageA SetWindowTextA

advapi32

RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegQueryValueExA RegCloseKey

shell32

CommandLineToArgvW

ole32

CoCreateInstance

oleaut32

SysStringLen LoadRegTypeLi SysAllocString VariantClear SysFreeString

msvcrt

fopen fwrite _strlwr fclose rand memcmp memcpy free _initterm malloc _adjust_fdiv _stricmp strchr _purecall strstr _access strcpy strcat sprintf strlen ??2@YAPAXI@Z memset strcmp ??3@YAXPAX@Z strrchr

Sharing