jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]28b1f057ef64cb17a57aece8b54361af

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.28b1f057ef64cb17a57aece8b54361af
Size 80KB
Sample261014-arax5swtcs
SHA256 507ad6e035d62f4d838d9059ca48ea5e5df863b1b71dafc5b107e934ad928ed5
MD5 28b1f057ef64cb17a57aece8b54361af
SHA1 4b674ef12dbc8aa844c5b0bba114f39963bbee61
SHA512 9f64323f53fd46119b09355f4119f76888c7efadf0f39fe918db71b10511df00093c58c5f896143b2692d93720e5e9c0843c7f7cca3e0e13d8c7bd3b316cffc4
SSDEEP 768:cEP7W9TxUNf1Fp0NAsLA+UOTJw+DdgowOkaHKzXiB9oQgs8DZAGTsa9Uwuh:FDZ0N1yOTJx9wdza4s9w+
TLSH
T178839D32B5F141B3D1AE41B210A28F2A9FBE7E310FE64D878F6619461E70963C637217
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.28b1f057ef64cb17a57aece8b54361af

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.28b1f057ef64cb17a57aece8b54361af

.dll 80KB

jaffacakes118_HEUR.Trojan.Win32.Generic.28b1f057ef64cb17a57aece8b54361af

IMPHASH e1054ca21eda7a5ff3821c3168c5450b
SHA256 507ad6e035d62f4d838d9059ca48ea5e5df863b1b71dafc5b107e934ad928ed5
MD5 28b1f057ef64cb17a57aece8b54361af
SHA1 4b674ef12dbc8aa844c5b0bba114f39963bbee61
SHA512 9f64323f53fd46119b09355f4119f76888c7efadf0f39fe918db71b10511df00093c58c5f896143b2692d93720e5e9c0843c7f7cca3e0e13d8c7bd3b316cffc4
SSDEEP 768:cEP7W9TxUNf1Fp0NAsLA+UOTJw+DdgowOkaHKzXiB9oQgs8DZAGTsa9Uwuh:FDZ0N1yOTJx9wdza4s9w+
TLSH
T178839D32B5F141B3D1AE41B210A28F2A9FBE7E310FE64D878F6619461E70963C637217
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12660

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetPrivateProfileStringA WritePrivateProfileStringA TerminateProcess WaitForSingleObject GetLastError lstrlenA GetModuleFileNameA GetSystemDirectoryA CreateProcessA OutputDebugStringA Sleep LCMapStringW LCMapStringA SetEndOfFile LoadLibraryA GetOEMCP GetACP GetCPInfo HeapFree HeapAlloc HeapReAlloc GetFileAttributesA RtlUnwind GetCommandLineA GetVersion GetModuleHandleA GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection ExitProcess CloseHandle WriteFile ReadFile GetProcAddress GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue GetCurrentProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW SetFilePointer InterlockedDecrement InterlockedIncrement SetStdHandle FlushFileBuffers CreateFileA MultiByteToWideChar GetStringTypeA GetStringTypeW SetUnhandledExceptionFilter IsBadReadPtr IsBadCodePtr

user32

CreateDesktopA OpenDesktopA CloseDesktop

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey RegSetValueExA

ws2_32

closesocket recv send shutdown socket setsockopt connect WSAStartup inet_addr gethostbyname WSACleanup htons

Sharing