jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]22f01d01292e5c340ad4976c39962d8e

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.22f01d01292e5c340ad4976c39962d8e
Size 22KB
Sample261014-ae4ppads8v
SHA256 15577b3e5b03dd3bcaed395282418a80e6e292943bb0fb941d27c70deb9776e6
MD5 22f01d01292e5c340ad4976c39962d8e
SHA1 ccc3daef9d79fc00436cec4689150f34812ace71
SHA512 19528765cbe15eca533973b3090783fe3b96cb843d2737ab979f7d20f259b4b5e3d7ca80f317434b2642c03d70b777682855482ce718dd1acbaac7c12c391a86
SSDEEP 384:psFVnriitfNLqnAt/ZXAJBrM55eQGhaWG8nIWCFuAVhdotHflcbzoLnTRCSr+V9f:C/iiDLqnAt/yJ+DRmnqutt/lcbzeTRC1
TLSH
T1ACB26C12A6E019B8EDF255F609BE2721607FF952872983D7092096DC49A5FC4FE327C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.22f01d01292e5c340ad4976c39962d8e

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.22f01d01292e5c340ad4976c39962d8e

.sys 22KB

jaffacakes118_HEUR.Trojan.Win32.Generic.22f01d01292e5c340ad4976c39962d8e

IMPHASH be34ffb3683edbc99c5b6becf288cad2
SHA256 15577b3e5b03dd3bcaed395282418a80e6e292943bb0fb941d27c70deb9776e6
MD5 22f01d01292e5c340ad4976c39962d8e
SHA1 ccc3daef9d79fc00436cec4689150f34812ace71
SHA512 19528765cbe15eca533973b3090783fe3b96cb843d2737ab979f7d20f259b4b5e3d7ca80f317434b2642c03d70b777682855482ce718dd1acbaac7c12c391a86
SSDEEP 384:psFVnriitfNLqnAt/ZXAJBrM55eQGhaWG8nIWCFuAVhdotHflcbzoLnTRCSr+V9f:C/iiDLqnAt/yJ+DRmnqutt/lcbzeTRC1
TLSH
T1ACB26C12A6E019B8EDF255F609BE2721607FF952872983D7092096DC49A5FC4FE327C3
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8965

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

tdpipe.pdb

Name

.text

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

420B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

128B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.iuce

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

384B

Virtual Size

384B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jaffacakes118_HEUR.Trojan.Win32.Generic.22f01d01292e5c340ad4976c39962d8e

ntoskrnl.exe

termdd.sys

hal

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.22f01d01292e5c340ad4976c39962d8e

ntoskrnl.exe

termdd.sys

hal

generic