jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]2afa56891b937d23b61ace633aca2d50

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.2afa56891b937d23b61ace633aca2d50
Size 32KB
Sample261014-ayqbeatt2j
SHA256 2cb542a471593cf08bf43ebedb94a513cfa2cc97c7a60eee028cb8e36c007c3c
MD5 2afa56891b937d23b61ace633aca2d50
SHA1 11a1a167389efffdd742da0b2188f82224835a03
SHA512 6aaae427a7811d8e58b7f019de4680e95d7d9d1edff0c0d2fedef946baf188fe5f7e12ad5483a5998dd5afe27a32df69531fa4acd4afc9fe7708d6bc41cfe8d9
SSDEEP 768:5UTHaQ5CPZ5mvC87Gt6ZWpNqOjsSRzVs+:5UTHb5i5mH7GtEDQRxJ
TLSH
T146E26C13774744B7E39B423475162F7EDBFC69301A4A85AACB6247CE1CB45C2EA36243
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.2afa56891b937d23b61ace633aca2d50

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2afa56891b937d23b61ace633aca2d50

.dll 32KB

jaffacakes118_HEUR.Trojan.Win32.Generic.2afa56891b937d23b61ace633aca2d50

IMPHASH e50f791d58d2afa6daa79b6bcd1df56d
SHA256 2cb542a471593cf08bf43ebedb94a513cfa2cc97c7a60eee028cb8e36c007c3c
MD5 2afa56891b937d23b61ace633aca2d50
SHA1 11a1a167389efffdd742da0b2188f82224835a03
SHA512 6aaae427a7811d8e58b7f019de4680e95d7d9d1edff0c0d2fedef946baf188fe5f7e12ad5483a5998dd5afe27a32df69531fa4acd4afc9fe7708d6bc41cfe8d9
SSDEEP 768:5UTHaQ5CPZ5mvC87Gt6ZWpNqOjsSRzVs+:5UTHb5i5mH7GtEDQRxJ
TLSH
T146E26C13774744B7E39B423475162F7EDBFC69301A4A85AACB6247CE1CB45C2EA36243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CreateThread WaitForSingleObject ReadFile GetFileSize SetFilePointer GetLastError CreateEventA GetModuleFileNameA GetTempPathA GetWindowsDirectoryA GetSystemDirectoryA SetFileAttributesA GetCommandLineA CreateMutexA MultiByteToWideChar DeleteFileA GlobalLock CreateFileA WriteFile GlobalUnlock GlobalFree CloseHandle LoadLibraryA GetProcAddress GlobalAlloc VirtualProtect Sleep ExitProcess IsBadReadPtr

user32

GetParent GetWindowThreadProcessId EnumWindows wsprintfA GetWindowTextA ReleaseDC GetWindowRect GetDC GetDesktopWindow GetClientRect CallWindowProcA GetClassNameA SetWindowLongA RegisterShellHookWindow RegisterWindowMessageA

gdi32

CreateDCA GetDeviceCaps DeleteObject BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC GetDIBits RealizePalette SelectPalette GetStockObject GetObjectA DeleteDC

gdiplus

GdipCloneImage GdipAlloc GdipFree GdipGetImageEncodersSize GdipGetImageEncoders GdiplusStartup GdipSaveImageToFile GdiplusShutdown GdipLoadImageFromFile GdipDisposeImage

msvcp60

??0_Lockit@std@@QAE@XZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??0Init@ios_base@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ

ws2_32

inet_ntoa send recv socket inet_addr htons connect closesocket gethostbyname WSACleanup WSAStartup

wininet

InternetOpenUrlA InternetCloseHandle InternetReadFile InternetOpenA

msvcrt

_access strrchr strchr strstr abs malloc free _onexit _initterm _adjust_fdiv _strrev _getpid _stricmp _strlwr __dllonexit wcscmp ??2@YAPAXI@Z memcpy __CxxFrameHandler strncpy atoi strcmp memset strcat strcpy strlen sprintf

netapi32

Netbios