jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]2e3b6a4f3c8e922a3faf82e907107fea

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.2e3b6a4f3c8e922a3faf82e907107fea
Size 78KB
Sample261014-badhdady5v
SHA256 2faef66c0a68b242719a9c69c1160a971ab6274fa84c3397a8f910fc1d3e5263
MD5 2e3b6a4f3c8e922a3faf82e907107fea
SHA1 e2f740b3bdffae656e00fe21da10719ed8ceb45d
SHA512 a1ef668c99c4c3f8bd91f59d0750a8e1d0eae5cbb85576e54591d3c1519f8010c7de97eb80dc276329f64b3a0c1b3948870e919c9e3c05cf3af4a26d336ab72f
SSDEEP 1536:NB89xqNeRVnnN9h20rvpsmi9FytMR0N/k9+TkVWqQ7s1liomJlIK:GrnnNnlpsjL+hgbQmiomJlIK
TLSH
T14073D06179D88427D5A281B105A78F077B767C740B609B930BA0B95FAD331D0AF33763
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.2e3b6a4f3c8e922a3faf82e907107fea

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2e3b6a4f3c8e922a3faf82e907107fea

.exe 78KB

jaffacakes118_HEUR.Trojan.Win32.Generic.2e3b6a4f3c8e922a3faf82e907107fea

IMPHASH 8eda5e9b557216612e9f1cc0a56d893b
SHA256 2faef66c0a68b242719a9c69c1160a971ab6274fa84c3397a8f910fc1d3e5263
MD5 2e3b6a4f3c8e922a3faf82e907107fea
SHA1 e2f740b3bdffae656e00fe21da10719ed8ceb45d
SHA512 a1ef668c99c4c3f8bd91f59d0750a8e1d0eae5cbb85576e54591d3c1519f8010c7de97eb80dc276329f64b3a0c1b3948870e919c9e3c05cf3af4a26d336ab72f
SSDEEP 1536:NB89xqNeRVnnN9h20rvpsmi9FytMR0N/k9+TkVWqQ7s1liomJlIK:GrnnNnlpsjL+hgbQmiomJlIK
TLSH
T14073D06179D88427D5A281B105A78F077B767C740B609B930BA0B95FAD331D0AF33763
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

53263

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar LoadLibraryA GetProcAddress HeapReAlloc VirtualAlloc HeapAlloc CloseHandle GetACP GetCPInfo WriteFile RtlUnwind HeapFree VirtualFree HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings LockResource FindResourceA LoadResource GetCurrentProcessId QueryPerformanceCounter GetCurrentThreadId GetTickCount GetOEMCP GetSystemTimeAsFileTime WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA UnhandledExceptionFilter GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess TerminateProcess GetCurrentProcess GetStringTypeW

user32

PostQuitMessage EndDialog LoadAcceleratorsA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA LoadCursorA LoadIconA RegisterClassExA GetSystemMetrics CreateWindowExA ShowWindow UpdateWindow LoadStringA GetClientRect DefWindowProcA DestroyWindow DialogBoxParamW wsprintfA BeginPaint DrawTextA EndPaint

gdi32

Rectangle SetPixel TextOutA CreateBitmap

advapi32

RegCloseKey RegOpenKeyExA RegQueryValueExA

shell32

StrStrIA StrRChrA

ole32

CoInitialize

Sharing