jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]23e2e6ffa4c6f13e21ec0f3cce6be84b

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.23e2e6ffa4c6f13e21ec0f3cce6be84b
Size 1.4MB
Sample261014-agf2eady9n
SHA256 6dcfe1929de8185372beb68ed6c0bdefede8c51584911e87c051db3af473a966
MD5 23e2e6ffa4c6f13e21ec0f3cce6be84b
SHA1 742ce13c0a00af1329f44029dceb1a76efda97ef
SHA512 94b989457f248e4693d2533067ca305a3ac06993a7b8bd59397c5b519b64ec3359edc3d0c6eb3fec2bc5081ba5dbba514367929f94e57b0fb0351e11fcebc4df
SSDEEP 12288:50mX0mgR9AD+9/hXzH9TOuy3v87y0Tf6kEBYGSM8/BSAIJib:umX0niu/Ou+a6kEBYm8/cAII
TLSH
T1DD651256B9C1D4B4D5F2CE3108B1DFA98A3DFA544B60AEEF335025190F302D0DA3699B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.23e2e6ffa4c6f13e21ec0f3cce6be84b

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.23e2e6ffa4c6f13e21ec0f3cce6be84b

.exe 1.4MB

jaffacakes118_HEUR.Trojan.Win32.Generic.23e2e6ffa4c6f13e21ec0f3cce6be84b

IMPHASH eef6924db43bb0315b5a637229008df5
SHA256 6dcfe1929de8185372beb68ed6c0bdefede8c51584911e87c051db3af473a966
MD5 23e2e6ffa4c6f13e21ec0f3cce6be84b
SHA1 742ce13c0a00af1329f44029dceb1a76efda97ef
SHA512 94b989457f248e4693d2533067ca305a3ac06993a7b8bd59397c5b519b64ec3359edc3d0c6eb3fec2bc5081ba5dbba514367929f94e57b0fb0351e11fcebc4df
SSDEEP 12288:50mX0mgR9AD+9/hXzH9TOuy3v87y0Tf6kEBYGSM8/BSAIJib:umX0niu/Ou+a6kEBYm8/cAII
TLSH
T1DD651256B9C1D4B4D5F2CE3108B1DFA98A3DFA544B60AEEF335025190F302D0DA3699B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

21784

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DecodePointer WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize GetModuleHandleW GetProcessHeap GetStringTypeW GetFileType SetStdHandle LCMapStringW VirtualProtect FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW EncodePointer RaiseException GetLastError SetLastError RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc CloseHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA CreateFileW

user32

CreateWindowExW ReleaseDC AnimateWindow SetForegroundWindow AdjustWindowRectEx ActivateKeyboardLayout ImpersonateDdeClientWindow AddClipboardFormatListener CalculatePopupWindowPosition DisableProcessWindowsGhosting GetDC RegisterClassW LoadCursorW DefWindowProcW EndPaint BeginPaint SendMessageW AdjustWindowRect

gdi32

CreateSolidBrush

shell32

ord98 ord92 ord90 ord170 ord709 SHLoadNonloadedIconOverlayIdentifiers

Sharing