jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]3a1697e19b9e98940d5ec85d18f37703

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.3a1697e19b9e98940d5ec85d18f37703
Size 196KB
Sample261014-b2b4maes3w
SHA256 5bcecd1a31f9fe6d2a2bd8411b8ac45f33526d87969f3c6178dcdd9ab7c2fa9a
MD5 3a1697e19b9e98940d5ec85d18f37703
SHA1 20c676ca99fe9b173fc1b4e75b3106708e05c6d2
SHA512 bfc11293f4ef6e305d96596dc6910d3302eef98e98a05fdd302251d442264b9f1bc199647628f46be12d76a60f0628c51e7bc52bbcecd919bd65c7811ae8d2c1
SSDEEP 3072:v83z9VZOwfzpwg0l2MY/HC2H1dyLNmg55zU3PH5Fwj:vUqAVwrRYvloB5hU3P
TLSH
T109148D10A640CC7BD5AA007588EFCB3A5E2DB871075894C7B7E98EA70E712E59F3174B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.3a1697e19b9e98940d5ec85d18f37703

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.3a1697e19b9e98940d5ec85d18f37703

.dll 196KB

jaffacakes118_HEUR.Trojan.Win32.Generic.3a1697e19b9e98940d5ec85d18f37703

IMPHASH 3b5fae7e898b362624c9f015089dea29
SHA256 5bcecd1a31f9fe6d2a2bd8411b8ac45f33526d87969f3c6178dcdd9ab7c2fa9a
MD5 3a1697e19b9e98940d5ec85d18f37703
SHA1 20c676ca99fe9b173fc1b4e75b3106708e05c6d2
SHA512 bfc11293f4ef6e305d96596dc6910d3302eef98e98a05fdd302251d442264b9f1bc199647628f46be12d76a60f0628c51e7bc52bbcecd919bd65c7811ae8d2c1
SSDEEP 3072:v83z9VZOwfzpwg0l2MY/HC2H1dyLNmg55zU3PH5Fwj:vUqAVwrRYvloB5hU3P
TLSH
T109148D10A640CC7BD5AA007588EFCB3A5E2DB871075894C7B7E98EA70E712E59F3174B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

111690

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LoadLibraryA GetProcAddress FreeLibrary VirtualFree DeleteCriticalSection EnterCriticalSection LeaveCriticalSection Sleep VirtualAlloc WaitForSingleObject CloseHandle ResetEvent GetLastError CancelIo InterlockedExchange SetEvent DeleteFileA lstrlenA lstrcpyA GetFileAttributesA CreateDirectoryA GetLogicalDriveStringsA GetVolumeInformationA GetDiskFreeSpaceExA GetDriveTypeA LocalAlloc FindFirstFileA LocalReAlloc FindNextFileA LocalFree FindClose GetFileSize SetFilePointer ReadFile MoveFileA lstrcatA CreateProcessA CreateThread TerminateThread CreateToolhelp32Snapshot Process32First lstrcmpiA Process32Next HeapAlloc GetProcessHeap HeapFree GetTickCount GetLocalTime CreateFileMappingA MapViewOfFile UnmapViewOfFile GetModuleHandleA GlobalAlloc GlobalLock GlobalUnlock GlobalFree GlobalSize GetStartupInfoA WaitForMultipleObjects LocalSize OpenProcess TerminateProcess GetCurrentThreadId GetVersionExA GetComputerNameA GetSystemInfo GlobalMemoryStatus SetErrorMode OpenEventA GetCurrentProcess GetWindowsDirectoryA SetFileAttributesA GetModuleFileNameA ExpandEnvironmentStringsA CopyFileA CreateFileA RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitThread WideCharToMultiByte GetCommandLineA SetHandleCount GetStdHandle GetFileType HeapCreate HeapDestroy HeapReAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement ExitProcess WriteFile GetCPInfo GetACP GetOEMCP IsValidCodePage FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind HeapSize LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

Sharing