jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]2ae57d23422f27a4d8f25e3b3d23d411

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.2ae57d23422f27a4d8f25e3b3d23d411
Size 109KB
Sample261014-ax5ppsts8j
SHA256 436b5739f18d59256355f804c8d6d0216982238f4437426cd86aeb3359e012f7
MD5 2ae57d23422f27a4d8f25e3b3d23d411
SHA1 2426aaa88803d06f52a44ca412bef260c9c284cd
SHA512 d3c2a2014cb08f9f0b745b27c01163c81be0c2d86c8e60d1798e3d8fa0bea0d97d7916f9794428ac95f4f62240cc7fd79a2e0d19da860152fe64734bfd40d12e
SSDEEP 1536:Ge77BCltER4Aq+6GH0Btd63iDe+XSKDaUNUR0hyRwI1rBsTt/Q7L8+5k8WbtL:H+Rv+WdK2SKHNUR0hCJrst9/8gL
TLSH
T12CB3AF12F39C846AE8B7433519B70AE76A3DFC320F65470BE704B66E39B9544FA11B24
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.2ae57d23422f27a4d8f25e3b3d23d411

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2ae57d23422f27a4d8f25e3b3d23d411

.dll 109KB

jaffacakes118_HEUR.Trojan.Win32.Generic.2ae57d23422f27a4d8f25e3b3d23d411

IMPHASH 1f0a14b9185e1cf0a6c881b07962b180
SHA256 436b5739f18d59256355f804c8d6d0216982238f4437426cd86aeb3359e012f7
MD5 2ae57d23422f27a4d8f25e3b3d23d411
SHA1 2426aaa88803d06f52a44ca412bef260c9c284cd
SHA512 d3c2a2014cb08f9f0b745b27c01163c81be0c2d86c8e60d1798e3d8fa0bea0d97d7916f9794428ac95f4f62240cc7fd79a2e0d19da860152fe64734bfd40d12e
SSDEEP 1536:Ge77BCltER4Aq+6GH0Btd63iDe+XSKDaUNUR0hyRwI1rBsTt/Q7L8+5k8WbtL:H+Rv+WdK2SKHNUR0hCJrst9/8gL
TLSH
T12CB3AF12F39C846AE8B7433519B70AE76A3DFC320F65470BE704B66E39B9544FA11B24
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11516

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

comctl32

ord17 ImageList_LoadImageW ImageList_Destroy

kernel32

WaitForSingleObject CreateMutexA GetCurrentProcessId LoadLibraryExA GetModuleHandleA GetSystemDirectoryA GetVersionExA GetFileAttributesA GetLocaleInfoA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount Sleep GetDriveTypeA GetStdHandle WriteFile ExitProcess IsValidCodePage GetOEMCP GetCPInfo TlsFree TlsSetValue TlsAlloc TlsGetValue HeapSize IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess ReleaseMutex HeapDestroy GetCommandLineA VirtualQuery GetSystemInfo VirtualProtect GetFullPathNameA RtlUnwind HeapReAlloc VirtualAlloc VirtualFree IsProcessorFeaturePresent LoadLibraryA HeapAlloc GetProcessHeap HeapFree InterlockedCompareExchange GetACP InterlockedExchange GetSystemTimeAsFileTime SetEnvironmentVariableA SetEnvironmentVariableW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode GetCurrentDirectoryA CompareStringA CompareStringW CloseHandle GetProcAddress GetModuleFileNameA GetThreadLocale SetThreadLocale GetModuleHandleW LoadLibraryExW SizeofResource FreeLibrary GetModuleFileNameW lstrcmpW SetStdHandle WriteConsoleA GetConsoleOutputCP GlobalHandle GlobalFree LoadResource LockResource GlobalLock GetTickCount GlobalUnlock GetCurrentThreadId SetLastError MulDiv FindResourceW GlobalAlloc GetCurrentProcess FlushInstructionCache LeaveCriticalSection EnterCriticalSection SetErrorMode FindFirstFileA FindNextFileA FindClose lstrcmpiW DeleteCriticalSection InitializeCriticalSection GetLastError WideCharToMultiByte lstrlenA OutputDebugStringW DebugBreak InterlockedIncrement InterlockedDecrement lstrlenW MultiByteToWideChar RaiseException WriteConsoleW CreateFileA FlushFileBuffers HeapCreate

comdlg32

CommDlgExtendedError GetOpenFileNameW

ole32

OleRegEnumVerbs CreateOleAdviseHolder CoCreateInstance CLSIDFromString CLSIDFromProgID CoGetClassObject OleRegGetUserType StringFromGUID2 OleUninitialize OleInitialize CreateStreamOnHGlobal CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc OleRegGetMiscStatus WriteClassStm CreateDataAdviseHolder OleSaveToStream ReadClassStm OleLockRunning

oleaut32

SysAllocString VarBstrCmp RegisterTypeLi UnRegisterTypeLi OleCreatePropertyFrame LoadTypeLi LoadRegTypeLi OleCreateFontIndirect VarUI4FromStr SysStringByteLen SysAllocStringByteLen SysAllocStringLen SysStringLen VariantChangeType OleTranslateColor SysFreeString VariantClear VariantInit

Name

.text

Size

66KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.abss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.atls

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.shared

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2ae57d23422f27a4d8f25e3b3d23d411

comctl32

kernel32

comdlg32

ole32

oleaut32

generic