jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]2e4fbced9f115d49b64f220ed183935e

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.2e4fbced9f115d49b64f220ed183935e
Size 134KB
Sample261014-basbjaev5r
SHA256 48ac88b940e1dec3d3983dd49a26499aa7c47e2ca3b8dd75dac89173431e86db
MD5 2e4fbced9f115d49b64f220ed183935e
SHA1 57cf733b764ba2ddff7f3760972214436195c085
SHA512 e61ff3a297df1b918143f053bb2231d7509b055b79b19431c0853b03b541e8dbeddd89c5d759104d7c960d98c4d4b7a9d3a3f6e65b60501224336465505fdc6e
SSDEEP 1536:K+FDoKtniY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZ:K+FDzK71QkbstyJjCKICpC72s/mlaX
TLSH
T137D3E166F79908D2D2848F3B878AAD30CE456D23464B10F989843FBF9D37D01B56D27A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.2e4fbced9f115d49b64f220ed183935e

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2e4fbced9f115d49b64f220ed183935e

.exe 134KB

jaffacakes118_HEUR.Trojan.Win32.Generic.2e4fbced9f115d49b64f220ed183935e

IMPHASH ddbb90ebf41500dde8a2155d2d44be6d
SHA256 48ac88b940e1dec3d3983dd49a26499aa7c47e2ca3b8dd75dac89173431e86db
MD5 2e4fbced9f115d49b64f220ed183935e
SHA1 57cf733b764ba2ddff7f3760972214436195c085
SHA512 e61ff3a297df1b918143f053bb2231d7509b055b79b19431c0853b03b541e8dbeddd89c5d759104d7c960d98c4d4b7a9d3a3f6e65b60501224336465505fdc6e
SSDEEP 1536:K+FDoKtniY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZ:K+FDzK71QkbstyJjCKICpC72s/mlaX
TLSH
T137D3E166F79908D2D2848F3B878AAD30CE456D23464B10F989843FBF9D37D01B56D27A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4540

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

VariantChangeTypeEx SysStringLen SysAllocStringLen VariantCopyInd VariantClear

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

advapi32

RegQueryValueExA RegCloseKey OpenProcessToken RegOpenKeyExA LookupPrivilegeValueA

kernel32

SetCommConfig CreateFileA CloseHandle FindResourceA Sleep DeleteFileA VirtualFree SetFilePointer SetErrorMode GetSystemInfo RemoveDirectoryA ReadFile GetUserDefaultLangID OutputDebugStringA GetEnvironmentVariableA GetWindowsDirectoryA GetLocaleInfoA LoadLibraryA GetACP LockResource GetFileSize FormatMessageA FlushViewOfFile GetExitCodeProcess GetFullPathNameA GetLastError GetSystemDefaultLCID SetEndOfFile GetFileAttributesA LoadResource VirtualQuery GetCurrentProcess SizeofResource GetProcAddress GetVersionExA GetModuleHandleA GetCommandLineA GetModuleFileNameA IsDBCSLeadByte CreateProcessA VirtualProtect CreateDirectoryA VirtualAlloc InterlockedExchange WriteFile ReadFile GetCommandLineA GetModuleHandleA GetLastError GetStdHandle CreateFileA GetFileSize ExitProcess WideCharToMultiByte LocalAlloc TlsSetValue VirtualAlloc LocalFree WriteFile LeaveCriticalSection GetFileType SetEndOfFile TlsGetValue SetFilePointer CloseHandle VirtualFree MultiByteToWideChar GetSystemTime RaiseException EnterCriticalSection DeleteCriticalSection

user32

MessageBoxA SetWindowLongA CharPrevA ExitWindowsEx TranslateMessage MsgWaitForMultipleObjects LoadStringA CallWindowProcA DestroyWindow CreateWindowExA PeekMessageA DispatchMessageA