jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]2e883943ffa353c0f77ff0feb4e2d96a

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.2e883943ffa353c0f77ff0feb4e2d96a
Size 120KB
Sample261014-bbmgnswxcw
SHA256 f740fc47b1ea79c8e62e25437675c1c2a9822b7793ddd5f6829c2e0d84489f6f
MD5 2e883943ffa353c0f77ff0feb4e2d96a
SHA1 c181dce0544d0e3ba590543e96df59f3308986a6
SHA512 502cc2e573cebdb1abd30e99b1f558425fa34a56f65ea4da9f11c81704c9e73309b6c5720002e3b0b180c010111e179b9ddc535a35489a4df964f9e20f4d7cce
SSDEEP 3072:7wfpKhbdTz1twuf3y4novRVgKK/+DbkZVnqp2TmckBcG/Y:7wfCj+wC4noZJK/KkZVn/Mg
TLSH
T1C8C3E103D74166ABE0995736C2DF07265FB3027057A606AB8BA19D3F2C327C03D26F96
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.2e883943ffa353c0f77ff0feb4e2d96a

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2e883943ffa353c0f77ff0feb4e2d96a

.exe 120KB

jaffacakes118_HEUR.Trojan.Win32.Generic.2e883943ffa353c0f77ff0feb4e2d96a

IMPHASH 83f691756c655c72b1e676f68e64db8d
SHA256 f740fc47b1ea79c8e62e25437675c1c2a9822b7793ddd5f6829c2e0d84489f6f
MD5 2e883943ffa353c0f77ff0feb4e2d96a
SHA1 c181dce0544d0e3ba590543e96df59f3308986a6
SHA512 502cc2e573cebdb1abd30e99b1f558425fa34a56f65ea4da9f11c81704c9e73309b6c5720002e3b0b180c010111e179b9ddc535a35489a4df964f9e20f4d7cce
SSDEEP 3072:7wfpKhbdTz1twuf3y4novRVgKK/+DbkZVnqp2TmckBcG/Y:7wfCj+wC4noZJK/KkZVn/Mg
TLSH
T1C8C3E103D74166ABE0995736C2DF07265FB3027057A606AB8BA19D3F2C327C03D26F96
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

44068

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

odbccp32

SQLWritePrivateProfileStringW SQLInstallDriverManagerW SQLInstallerError SQLGetTranslatorW SQLInstallTranslator SQLInstallDriverEx SQLWriteDSNToIniW SQLLoadDriverListBox SQLSetConfigMode SQLInstallDriverExW SQLInstallODBC SQLPostInstallerError SQLRemoveDSNFromIni SQLInstallTranslatorExW SQLConfigDriver SQLGetInstalledDrivers SQLGetPrivateProfileString SQLPostInstallerErrorW SQLCreateDataSource SQLCreateDataSourceEx SQLInstallDriverManager SQLGetAvailableDrivers SQLConfigDataSource SQLRemoveTranslator SQLConfigDataSourceW

msoert2

HrIStreamToBSTR CreateTempFile OpenFileStreamShare PszDupW CleanupFileNameInPlaceW PszAllocW IsUpper CreateStreamOnHFileW FIsEmptyW HrBSTRToLPSZ OpenFileStreamWithFlagsW PszScanToCharA IVoidPtrList_CreateInstance UlStripWhitespace HrGetBodyElement HrCheckTridentMenu OpenFileStream CryptFreeFunc HrStreamSeekSet WriteStreamToFile CopyRegistry WriteStreamToFileW HrCopyStreamCBEndOnCRLF OpenFileStreamW UnlocStrEqNW HrIsStreamUnicode FIsSpaceW ReplaceChars HrFindInetTimeZone CryptAllocFunc CleanupFileNameInPlaceA CreateSystemHandleName HrCopyStreamCB strtrimW DeleteTempFile StrToUintW HrSafeGetStreamSize CreateEnumFormatEtc FIsHTMLFileW HrGetStreamPos OpenFileStreamShareW CchFileTimeToDateTimeW

mswsock

rexec NPLoadNameSpaces EnumProtocolsA dn_expand rcmd GetServiceA s_perror GetTypeByNameW GetNameByTypeA MigrateWinsockConfiguration StartWsdpService getnetbyname NSPStartup WSPStartup GetAddressByNameW GetServiceW GetAcceptExSockaddrs AcceptEx GetTypeByNameA SetServiceW inet_network TransmitFile sethostname rresvport GetNameByTypeW WSARecvEx StopWsdpService SetServiceA EnumProtocolsW GetAddressByNameA

kernel32

FreeLibraryAndExitThread InterlockedExchangeAdd GetOEMCP VirtualAlloc TlsGetValue GetSystemWindowsDirectoryA FindActCtxSectionStringA GetConsoleKeyboardLayoutNameW FreeUserPhysicalPages IsWow64Process SetCurrentDirectoryW LoadLibraryA DeleteTimerQueueEx IsValidLocale GetSystemDirectoryW LocalAlloc AreFileApisANSI LeaveCriticalSection SetProcessWorkingSetSize SwitchToThread DeleteCriticalSection ReplaceFileA WriteConsoleInputA GetConsoleAliasA GetTapeStatus OpenConsoleW EnterCriticalSection FillConsoleOutputAttribute SetConsoleCtrlHandler RegisterWaitForSingleObject FileTimeToSystemTime WriteFileGather CopyFileExA GetPrivateProfileStructA

winmm

mciGetErrorStringW midiStreamOut midiOutCacheDrumPatches midiOutCachePatches midiOutGetDevCapsW waveOutWrite sndPlaySoundA waveOutPrepareHeader mixerClose waveOutGetErrorTextA midiOutGetDevCapsA WOW32ResolveMultiMediaHandle mmioDescend mciSendCommandA mixerGetDevCapsW midiStreamClose midiInGetErrorTextW midiDisconnect midiOutGetNumDevs mmGetCurrentTask PlaySound mxd32Message mmioAscend mmioSeek mciGetYieldProc mmTaskBlock

lz32

LZOpenFileA CopyLZFile LZStart LZRead LZCreateFileW LZClose LZDone GetExpandedNameA LZOpenFileW LZCopy LZSeek LZCloseFile GetExpandedNameW LZInit

msvcrt

__set_app_type exit __p__commode __getmainargs