jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]3b0ba30525d626d2f3d1e61f8b8e0ef4

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.3b0ba30525d626d2f3d1e61f8b8e0ef4
Size 324KB
Sample261014-b7glases8s
SHA256 310fdc3d9e4cbd1f48121ee97f6efd4be89ff1e1e2e37948f9c17468748dbf95
MD5 3b0ba30525d626d2f3d1e61f8b8e0ef4
SHA1 bfa0f5dd9cb40a750d5ac7663b7ec15ad2ff9b0f
SHA512 af12fce81fd7281824faa1c90a88bce7c7faf60fddec24968896edf453f2316dcf5ac3dcf9e240823a03d1bed5f2dbed9fc781e1b0675302f2c553060f4055af
SSDEEP 6144:Nf89Z3mFm7HK6kVJ3zc1X7eqg0cXb6VUK44lpF9cUmsKBdp9gubr0l9B5c3poJVD:Nf89Z3mo7H/e3zeXyN0cXb0UFCFzmsKd
TLSH
T1CD64CF26735CD195F7C9033C5DA69BF5D5327D02C8B53A53ABA4BB8F0A332C19422A1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.3b0ba30525d626d2f3d1e61f8b8e0ef4

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.3b0ba30525d626d2f3d1e61f8b8e0ef4

.exe 324KB

jaffacakes118_HEUR.Trojan.Win32.Generic.3b0ba30525d626d2f3d1e61f8b8e0ef4

IMPHASH dcec0550a7d145b096d6a6d1314d2c75
SHA256 310fdc3d9e4cbd1f48121ee97f6efd4be89ff1e1e2e37948f9c17468748dbf95
MD5 3b0ba30525d626d2f3d1e61f8b8e0ef4
SHA1 bfa0f5dd9cb40a750d5ac7663b7ec15ad2ff9b0f
SHA512 af12fce81fd7281824faa1c90a88bce7c7faf60fddec24968896edf453f2316dcf5ac3dcf9e240823a03d1bed5f2dbed9fc781e1b0675302f2c553060f4055af
SSDEEP 6144:Nf89Z3mFm7HK6kVJ3zc1X7eqg0cXb6VUK44lpF9cUmsKBdp9gubr0l9B5c3poJVD:Nf89Z3mo7H/e3zeXyN0cXb0UFCFzmsKd
TLSH
T1CD64CF26735CD195F7C9033C5DA69BF5D5327D02C8B53A53ABA4BB8F0A332C19422A1B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31232

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysAllocString SysFreeString SysStringLen VariantInit VariantClear

ole32

StringFromCLSID CoUninitialize CoTaskMemFree CoInitialize CoCreateInstance CoCreateGuid CoSetProxyBlanket

kernel32

FindNextFileW FormatMessageW FreeLibrary GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDiskFreeSpaceW GetDriveTypeW GetExitCodeProcess GetExitCodeThread GetFileAttributesExW GetFileAttributesW GetFileSize GetFileTime GetFileType GetLastError GetLocalTime GetLocaleInfoW GetLogicalDriveStringsW GetModuleHandleW GetPrivateProfileIntW GetPrivateProfileStringW GetProcAddress GetProcessHeap GetSystemDefaultLangID GetSystemDirectoryW GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetTickCount GetUserDefaultLangID GetVersionExW FindFirstFileW GetVolumePathNameW GetWindowsDirectoryW GlobalAlloc GlobalFree HeapAlloc HeapFree HeapReAlloc InitializeCriticalSection InterlockedCompareExchange InterlockedDecrement InterlockedExchange InterlockedIncrement LeaveCriticalSection LoadLibraryExW LocalFree MapViewOfFile MoveFileW MultiByteToWideChar QueryPerformanceCounter ReadFile ReleaseMutex RemoveDirectoryW ResetEvent SetEndOfFile SetEvent SetFileAttributesW SetFilePointer SetFileTime SetLastError SetUnhandledExceptionFilter Sleep SystemTimeToFileTime TerminateProcess UnhandledExceptionFilter UnmapViewOfFile WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcmpW lstrcmpiW lstrcpynW lstrlenA lstrlenW FindClose FileTimeToSystemTime ExpandEnvironmentStringsW EnterCriticalSection DisableThreadLibraryCalls DeleteFileW DeleteCriticalSection CreateThread CreateProcessW CreateMutexW CreateFileW CreateEventW CreateDirectoryW CompareStringW CompareStringA CompareFileTime CloseHandle GetVolumeInformationW

user32

CharUpperA GetActiveWindow ExitWindowsEx DispatchMessageW CharUpperW TranslateMessage SendMessageW PostMessageW PeekMessageW MsgWaitForMultipleObjects GetWindowThreadProcessId CharLowerA CharNextW GetKeyboardType

shlwapi

PathIsRelativeW PathIsRootW PathIsUNCW UrlGetPartW UrlCombineW StrToIntW StrToIntExW StrStrIW StrRChrW StrCmpW StrCmpIW StrChrW PathStripToRootW PathRemoveBackslashW PathFindExtensionW

shell32

SHGetFolderPathW SHGetMalloc ShellExecuteW SHGetPathFromIDListW SHBrowseForFolderW

advapi32

AdjustTokenPrivileges LsaQueryInformationPolicy LsaOpenPolicy SetNamedSecurityInfoW RegSetValueExW RegQueryValueExW RegOpenKeyW RegOpenKeyExW RegEnumKeyW RegEnumKeyExW RegDeleteKeyW RegCreateKeyExW RegCloseKey AllocateAndInitializeSid ConvertStringSecurityDescriptorToSecurityDescriptorW CopySid EqualSid FreeSid GetLengthSid GetSecurityDescriptorDacl GetSecurityDescriptorOwner GetTokenInformation IsValidSid LookupPrivilegeValueW LsaClose LsaFreeMemory LsaNtStatusToWinError OpenProcessToken

wininet

InternetCrackUrlW InternetGetConnectedState InternetQueryOptionA InternetCanonicalizeUrlW

setupapi

SetupDiBuildDriverInfoList SetupCloseInfFile SetupCloseFileQueue SetupDiCreateDeviceInfoList SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo CM_Locate_DevNodeW SetupDiGetClassDevsW SetupDiGetDeviceInstallParamsW SetupDiGetDeviceInstanceIdW SetupDiGetDeviceRegistryPropertyW SetupDiGetDriverInstallParamsW SetupDiInstallDriverFiles SetupDiOpenDevRegKey SetupDiOpenDeviceInfoW SetupDiSetDeviceInstallParamsW CM_Get_DevNode_Status SetupDiEnumDriverInfoW SetupScanFileQueueW SetupOpenInfFileW SetupOpenFileQueue SetupGetStringFieldW SetupFindFirstLineW SetupDiSetSelectedDriverW CM_Get_DevNode_Registry_PropertyW

crypt32

CryptHashPublicKeyInfo CertGetCertificateContextProperty