jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]22ef394425f189fabb29477464f44d5e

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.22ef394425f189fabb29477464f44d5e
Size 79KB
Sample261014-ae2v4ady7q
SHA256 b31cf3e56d339085352910f0a1073a343c9118efc7e337c2c7de0c076666d196
MD5 22ef394425f189fabb29477464f44d5e
SHA1 568c3705a47f3f0864ea06b92a96d81188574b63
SHA512 2878c75688c43d3ecefbf7d2896709797875429abd21363d4fcd8e9ea276f47bf8918dacdce39aadc3c9ac113f7facd5f76c8bcd9b781230fbf0ec6ae81640b6
SSDEEP 1536:q1ZBzbQPdd/MOGCEnlyQrs50UhUECF7bDo/JlIK:k3WPWP3rzCClbDo/JlIK
TLSH
T1C683E012F7F82023C9514A7244B7CB4A37BF3C5219641997BAE9A58F3F745D08F227A2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.22ef394425f189fabb29477464f44d5e

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.22ef394425f189fabb29477464f44d5e

.exe 79KB

jaffacakes118_HEUR.Trojan.Win32.Generic.22ef394425f189fabb29477464f44d5e

IMPHASH ccff6cba422be5cf2965f79f40d817e5
SHA256 b31cf3e56d339085352910f0a1073a343c9118efc7e337c2c7de0c076666d196
MD5 22ef394425f189fabb29477464f44d5e
SHA1 568c3705a47f3f0864ea06b92a96d81188574b63
SHA512 2878c75688c43d3ecefbf7d2896709797875429abd21363d4fcd8e9ea276f47bf8918dacdce39aadc3c9ac113f7facd5f76c8bcd9b781230fbf0ec6ae81640b6
SSDEEP 1536:q1ZBzbQPdd/MOGCEnlyQrs50UhUECF7bDo/JlIK:k3WPWP3rzCClbDo/JlIK
TLSH
T1C683E012F7F82023C9514A7244B7CB4A37BF3C5219641997BAE9A58F3F745D08F227A2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

56511

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

QueryPerformanceCounter GetCurrentProcessId GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar LoadLibraryA GetProcAddress HeapReAlloc VirtualAlloc GetCurrentThreadId GetOEMCP GetACP GetCPInfo WriteFile RtlUnwind HeapFree VirtualFree HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetFileSize CloseHandle GetCommandLineA HeapAlloc GetTickCount GetEnvironmentStrings WideCharToMultiByte GetStringTypeW FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleHandleA GetStartupInfoA GetVersion ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetModuleFileNameA

user32

EndPaint LoadIconA GetSystemMetrics wsprintfA LoadAcceleratorsA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA LoadCursorA DrawTextA RegisterClassExA CreateWindowExA ShowWindow UpdateWindow LoadStringA GetClientRect DefWindowProcA DestroyWindow BeginPaint PostQuitMessage

gdi32

Rectangle SetPixel TextOutA CreateBitmap

shell32

StrStrIA

ole32

CoInitialize CoUninitialize

Sharing