jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]3b70c57391d224e00d70849eab3d36b1

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.3b70c57391d224e00d70849eab3d36b1
Size 289KB
Sample261014-b9sfksty5m
SHA256 a116ab1fe01d073603828ef90ecb5377732a497bfedb36b24356d599095c044a
MD5 3b70c57391d224e00d70849eab3d36b1
SHA1 1d1aa00297ce689ff0aeba04eef0ae7ee4c5aeeb
SHA512 107ad6d54508360052f770be6edd48f8c7166cf333565c338313747f8daeea342932d57982d1ca91681c07aaa4815e851ab416fe819d6ebcd28bf9c3efa4a2f5
SSDEEP 6144:tnpAOgw8HYWO9ZcRqZerUpld14yk28rimaNEOJIxL+bs2:tnpH4HYWO9SU/d14yk288tIxLss2
TLSH
T11654CF126E05F06AF235B5F250D2E9DB661ADC11AC0A1618E7B1FB48C53B31BDCB50AF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.3b70c57391d224e00d70849eab3d36b1

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.3b70c57391d224e00d70849eab3d36b1

.exe 289KB

jaffacakes118_HEUR.Trojan.Win32.Generic.3b70c57391d224e00d70849eab3d36b1

IMPHASH d3137d8196eb945f8d7a79d6c88241a5
SHA256 a116ab1fe01d073603828ef90ecb5377732a497bfedb36b24356d599095c044a
MD5 3b70c57391d224e00d70849eab3d36b1
SHA1 1d1aa00297ce689ff0aeba04eef0ae7ee4c5aeeb
SHA512 107ad6d54508360052f770be6edd48f8c7166cf333565c338313747f8daeea342932d57982d1ca91681c07aaa4815e851ab416fe819d6ebcd28bf9c3efa4a2f5
SSDEEP 6144:tnpAOgw8HYWO9ZcRqZerUpld14yk28rimaNEOJIxL+bs2:tnpH4HYWO9SU/d14yk288tIxLss2
TLSH
T11654CF126E05F06AF235B5F250D2E9DB661ADC11AC0A1618E7B1FB48C53B31BDCB50AF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AddAtomA ExitProcess FindAtomA GetAtomNameA SetUnhandledExceptionFilter

msvcrt

__getmainargs __p__environ __p__fmode __set_app_type _assert _cexit _iob _onexit _setmode abort atexit free malloc memcpy memset signal strcpy strlen wcscpy

user32

BeginDeferWindowPos BeginPaint CallNextHookEx CallWindowProcW ChangeDisplaySettingsW CheckMenuItem CheckMenuRadioItem ChildWindowFromPoint CloseClipboard CreateAcceleratorTableW CreateDialogIndirectParamW CreateDialogParamW CreateIconIndirect CreateMenu CreateWindowExW DefFrameProcW DefMDIChildProcW DefWindowProcW DeferWindowPos DestroyIcon DestroyWindow DispatchMessageW DrawEdge DrawFocusRect DrawFrameControl DrawIconEx DrawMenuBar DrawStateW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDeferWindowPos EndPaint EnumClipboardFormats EnumDisplaySettingsW EnumWindows FillRect GetActiveWindow GetAsyncKeyState GetCapture GetClassInfoW GetClientRect GetClipboardData GetClipboardFormatNameW GetCursorPos GetDC GetDesktopWindow GetDlgItem GetFocus GetForegroundWindow GetIconInfo GetKeyState GetMenuItemInfoW GetMenuStringW GetMessagePos GetMessageW GetScrollInfo GetSubMenu GetSysColor GetSystemMenu GetSystemMetrics GetUpdateRect GetWindow GetWindowDC GetWindowLongW GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId HideCaret InsertMenuItemW InsertMenuW IsWindow IsWindowEnabled IsWindowVisible KillTimer LoadAcceleratorsW LoadBitmapW LoadCursorFromFileW LoadCursorW LoadIconW LoadImageW MapWindowPoints MessageBeep MessageBoxW MoveWindow OffsetRect OpenClipboard PeekMessageW PostThreadMessageW PtInRect RedrawWindow RegisterClassW RegisterClipboardFormatW RegisterHotKey ReleaseCapture RemoveMenu ScreenToClient SendMessageW SetCursor SetCursorPos SetMenu SetMenuItemInfoW SetParent SetWindowLongW SetWindowPos SetWindowTextW SetWindowsHookExW ShowCursor ShowWindow SystemParametersInfoW TrackPopupMenu TranslateMessage UnhookWindowsHookEx UnionRect UnregisterHotKey VkKeyScanW WaitForInputIdle WindowFromPoint

Name

.text

Size

32KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

117KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.3b70c57391d224e00d70849eab3d36b1

kernel32

msvcrt

user32

generic