jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]2a3242dd37944bea7956e6fd90b53f5c

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.2a3242dd37944bea7956e6fd90b53f5c
Size 70KB
Sample261014-avmfcats3m
SHA256 35acbb8f30369f3fe43b11272ecc98f07eb5d2704117ae202befa8b6fc5031a6
MD5 2a3242dd37944bea7956e6fd90b53f5c
SHA1 279b3d3acc4630acfa5c330c33a4505e6af20da7
SHA512 b6c6c7cc3b52394300e0dc0ba4266b22de525e752cd2abccbcdd1eaa6d2c7032ec45b5535d0fa9300c2ac0594a8d85c7377bd3c1dda5a74bcb68a504d24a9ed7
SSDEEP 1536:69P65AqBV/oQqmbB6WE9KAZHwKd4mOiXSnHes:69UvwQqmAswHrOia3
TLSH
T17E63D02B20227693FD05C17A3B3EA70282D6C15653ECD8E35B87EE847B5010E6D1BB4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.2a3242dd37944bea7956e6fd90b53f5c

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2a3242dd37944bea7956e6fd90b53f5c

.exe 70KB

jaffacakes118_HEUR.Trojan.Win32.Generic.2a3242dd37944bea7956e6fd90b53f5c

IMPHASH e75ac62de5dd5a4dbcd42d12db50794c
SHA256 35acbb8f30369f3fe43b11272ecc98f07eb5d2704117ae202befa8b6fc5031a6
MD5 2a3242dd37944bea7956e6fd90b53f5c
SHA1 279b3d3acc4630acfa5c330c33a4505e6af20da7
SHA512 b6c6c7cc3b52394300e0dc0ba4266b22de525e752cd2abccbcdd1eaa6d2c7032ec45b5535d0fa9300c2ac0594a8d85c7377bd3c1dda5a74bcb68a504d24a9ed7
SSDEEP 1536:69P65AqBV/oQqmbB6WE9KAZHwKd4mOiXSnHes:69UvwQqmAswHrOia3
TLSH
T17E63D02B20227693FD05C17A3B3EA70282D6C15653ECD8E35B87EE847B5010E6D1BB4E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10191

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\bmorphnPEcJ\TYHfuOVfcS\jvpyrjowLnS\vluveSewjmVd\rgfhaseUxvNZki.pdb

msvcrt

_controlfp __set_app_type __p__fmode gmtime floor fclose remove __p__commode iswctype _amsg_exit fprintf fgets isspace wcstok strchr wcschr memset swscanf iswdigit system strcspn _initterm gets strcoll _ismbblead fseek calloc wcslen _XcptFilter strtok wcsncmp clock mbtowc putc _exit _cexit getc rand fgetc fputc __setusermatherr __getmainargs setlocale islower towlower exit wcscspn time

kernel32

GetBinaryTypeW MulDiv lstrcatW RaiseException GlobalCompact Sleep GetCurrentDirectoryW DeviceIoControl lstrcmpW CreatePipe HeapAlloc GetTimeZoneInformation GlobalAddAtomW GlobalReAlloc SetCommMask IsBadWritePtr lstrcpyW HeapReAlloc FileTimeToSystemTime GetComputerNameW WaitCommEvent GetStartupInfoW HeapFree SetSystemTime LeaveCriticalSection SetupComm lstrcatA GetAtomNameW FoldStringW GlobalAlloc GetFullPathNameA GetDateFormatW SearchPathW DisconnectNamedPipe GetLongPathNameW GetModuleFileNameA FlushViewOfFile GetShortPathNameA SleepEx OpenFile CreateFileA HeapWalk GetCommConfig GetTickCount GetProcessHeap GetStartupInfoA EnumResourceNamesW CreateRemoteThread LocalUnlock lstrcpynA GlobalMemoryStatusEx CloseHandle lstrcpynW SetMailslotInfo QueryDosDeviceW

shlwapi

PathIsUNCW

comctl32

ImageList_Write CreateStatusWindowW ImageList_GetIconSize ImageList_ReplaceIcon CreatePropertySheetPageA PropertySheetW

comdlg32

PrintDlgExW CommDlgExtendedError GetOpenFileNameW GetSaveFileNameA GetOpenFileNameA ReplaceTextW

user32

DrawTextW SetDlgItemTextA AttachThreadInput SetPropW CharPrevA ToUnicodeEx DefDlgProcW MessageBoxA ShowOwnedPopups ValidateRect DrawIcon FindWindowA InternalGetWindowText GetUserObjectInformationW GetWindow CharNextA AppendMenuW SendDlgItemMessageA InsertMenuW LoadIconA DrawStateW BeginDeferWindowPos SetForegroundWindow SetMenuItemBitmaps ScreenToClient CharNextW mouse_event GetDlgItemTextA SetRectEmpty ScrollWindowEx IsCharLowerA SetClassLongW CharUpperA GetKeyNameTextW IsChild CharUpperBuffW CreateWindowExA IsWindowEnabled DrawTextExW GetIconInfo GetClassInfoExA AdjustWindowRectEx SetWindowPos IsDialogMessageA ArrangeIconicWindows GetForegroundWindow DrawEdge CreateCaret EqualRect GetSysColor CheckMenuRadioItem DestroyMenu CheckRadioButton GetMenuCheckMarkDimensions DefDlgProcA PostThreadMessageW PostMessageA LoadAcceleratorsA GetMenuStringA UpdateWindow GetMessageTime SetDlgItemInt ReplyMessage HideCaret SendMessageW DestroyWindow SetSysColors TrackPopupMenuEx DialogBoxParamW ActivateKeyboardLayout SendMessageA AdjustWindowRect SetWindowPlacement DialogBoxIndirectParamW LoadMenuA GetMessageW SetMenuItemInfoW LoadIconW DragObject CharToOemBuffA CharToOemW GetCursorPos GetClassInfoW OemToCharA MessageBoxExA CharToOemA MapVirtualKeyA GetShellWindow InSendMessageEx GetMenuItemCount IsWindowVisible DestroyAcceleratorTable SetScrollRange DialogBoxParamA FrameRect SendNotifyMessageW DrawAnimatedRects CharUpperBuffA RegisterHotKey GetClientRect InflateRect GetMenuItemRect DefFrameProcA RegisterClassExW UnloadKeyboardLayout LoadCursorW GetPropW IsCharAlphaA CreateAcceleratorTableW LoadStringA TileWindows SetTimer CreateIconFromResource UnionRect DefWindowProcA GetCaretPos IsCharAlphaNumericW GetDlgCtrlID CreateCursor GetSystemMenu

Name

.text

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.align

Size

1KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.date

Size

512B

Virtual Size

99B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.dati

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.char

Size

512B

Virtual Size

355B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.odata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2a3242dd37944bea7956e6fd90b53f5c

msvcrt

kernel32

shlwapi

comctl32

comdlg32

user32

generic