jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]29f2ce42edd2dc30d7f69ddbae2d1467

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.29f2ce42edd2dc30d7f69ddbae2d1467
Size 79KB
Sample261014-atbbpadw21
SHA256 cb13034a6138d3bafc370f8923c235cd1401ad96857103df4dbef15e813d047b
MD5 29f2ce42edd2dc30d7f69ddbae2d1467
SHA1 619626e68e71abb31bccc58f5d849fe18a99a82a
SHA512 ec2e0aec021c9172602ee378ca6945b350c8f18ac8a41bea7303b83d0ad9c8d2f67f145fdd2ce899051efd94801f712c0d13c138d38b0dca09954f31f373d6cd
SSDEEP 1536:N8kMBgPRskNBx03sU2Z1OwY94yLhr/jJO9IpH/HN8Ogk4NTq:NtMePyoxt6wY94KhrLo9I1Wf+
TLSH
T10383E14A75A2D553F88A91F4D4B929FEDAFD0E2BF4C8126F9B483C8C3D752196426038
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.29f2ce42edd2dc30d7f69ddbae2d1467

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.29f2ce42edd2dc30d7f69ddbae2d1467

.exe 79KB

jaffacakes118_HEUR.Trojan.Win32.Generic.29f2ce42edd2dc30d7f69ddbae2d1467

IMPHASH 85126e503e118f1985b8e9b4ee06d1bc
SHA256 cb13034a6138d3bafc370f8923c235cd1401ad96857103df4dbef15e813d047b
MD5 29f2ce42edd2dc30d7f69ddbae2d1467
SHA1 619626e68e71abb31bccc58f5d849fe18a99a82a
SHA512 ec2e0aec021c9172602ee378ca6945b350c8f18ac8a41bea7303b83d0ad9c8d2f67f145fdd2ce899051efd94801f712c0d13c138d38b0dca09954f31f373d6cd
SSDEEP 1536:N8kMBgPRskNBx03sU2Z1OwY94yLhr/jJO9IpH/HN8Ogk4NTq:NtMePyoxt6wY94KhrLo9I1Wf+
TLSH
T10383E14A75A2D553F88A91F4D4B929FEDAFD0E2BF4C8126F9B483C8C3D752196426038
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32766

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

user32

FrameRect SetWindowPos GetSysColorBrush UnhookWindowsHookEx GetScrollPos GetMessageA GetSysColor PostQuitMessage SetWindowTextA EnableMenuItem GetSubMenu EqualRect EnumWindows

kernel32

GetCurrentProcessId GetTickCount QueryPerformanceCounter SetUnhandledExceptionFilter VirtualAllocEx GetFileAttributesA GetTimeZoneInformation GetThreadLocale InterlockedExchange FileTimeToSystemTime GetStartupInfoA RtlUnwind ExitProcess GetACP GetTempPathA GetOEMCP

gdi32

DPtoLP CreateICW CopyEnhMetaFileA FillRgn ExcludeClipRect SelectClipPath CreateCompatibleBitmap SetViewportExtEx GetMapMode

ole32

CoTaskMemRealloc CoInitializeSecurity DoDragDrop StgOpenStorage CoRevokeClassObject StringFromGUID2 OleRun CoInitialize CoCreateInstance

advapi32

FreeSid CheckTokenMembership QueryServiceStatus CryptHashData RegCreateKeyA AdjustTokenPrivileges RegQueryValueExW RegCreateKeyExW GetSecurityDescriptorDacl GetUserNameA

msvcrt

strncpy _CIpow _lock _fdopen raise signal _flsbuf __initenv _strdup puts strcspn iswspace _mbscmp fflush __getmainargs fprintf __setusermatherr strlen

comctl32

ImageList_GetIconSize ImageList_DragEnter ImageList_LoadImageA ImageList_ReplaceIcon ImageList_LoadImageW ImageList_Destroy ImageList_GetBkColor ImageList_SetIconSize CreatePropertySheetPageA ImageList_GetIcon ImageList_DrawEx InitCommonControls ImageList_Write

shell32

CommandLineToArgvW DragQueryFileA DragQueryFileW DoEnvironmentSubstW ExtractIconExW ShellExecuteEx SHBrowseForFolderA DragAcceptFiles ShellExecuteW ExtractIconW SHGetPathFromIDList

oleaut32

SafeArrayCreate SafeArrayGetUBound SafeArrayUnaccessData SysReAllocStringLen SafeArrayPtrOfIndex VariantCopy SafeArrayPutElement SafeArrayRedim