jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]2f2adbdc350547cc0a22ecdbb8654172

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.2f2adbdc350547cc0a22ecdbb8654172
Size 130KB
Sample261014-beew1aev8r
SHA256 423ec8e130f0fafed1b678e89c1a70ce2c3dd82bc31df2a604e6881cf8665007
MD5 2f2adbdc350547cc0a22ecdbb8654172
SHA1 15320a3c23165d376e3e3860374b9946ab70e92b
SHA512 34ebc9231b828ccb4c3f47326e0983864bc337ad3346f40e5b454fdf807a229e8e33b44631007ea8fa1e617b3ee671a9c532c9bbbd873676703069ef16e6c6bf
SSDEEP 3072:CFVooiuIc9mHx4zEn8HhF4PRZ84mRRBIjrLxT8gTJUotPW+:0KoiuIr7n8O8HpATvhtn
TLSH
T144D39D52F7E5403ECA6240BC297DA777623B6E3050E86D87E7C46E9B38B57039A08353
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.2f2adbdc350547cc0a22ecdbb8654172

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2f2adbdc350547cc0a22ecdbb8654172

.dll 130KB

jaffacakes118_HEUR.Trojan.Win32.Generic.2f2adbdc350547cc0a22ecdbb8654172

IMPHASH e094109d45d2cb574f8f0edfc7a9bd93
SHA256 423ec8e130f0fafed1b678e89c1a70ce2c3dd82bc31df2a604e6881cf8665007
MD5 2f2adbdc350547cc0a22ecdbb8654172
SHA1 15320a3c23165d376e3e3860374b9946ab70e92b
SHA512 34ebc9231b828ccb4c3f47326e0983864bc337ad3346f40e5b454fdf807a229e8e33b44631007ea8fa1e617b3ee671a9c532c9bbbd873676703069ef16e6c6bf
SSDEEP 3072:CFVooiuIc9mHx4zEn8HhF4PRZ84mRRBIjrLxT8gTJUotPW+:0KoiuIr7n8O8HpATvhtn
TLSH
T144D39D52F7E5403ECA6240BC297DA777623B6E3050E86D87E7C46E9B38B57039A08353
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

121341

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GlobalFree ExpandEnvironmentStringsW CreateFileW GetFileSize CreateFileMappingW MapViewOfFile GetCPInfo GetStringTypeW IsDBCSLeadByteEx IsValidCodePage LoadLibraryW FreeLibrary GlobalUnlock GetLocaleInfoW GetThreadLocale CompareStringW lstrcmpW MulDiv MultiByteToWideChar GetLocaleInfoA lstrcpyW lstrcatW GetLocalTime GetTickCount GlobalHandle GlobalLock GlobalAlloc InterlockedCompareExchange TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetProfileStringW InterlockedExchange LocalAlloc LocalFree CloseHandle Sleep IsDBCSLeadByte lstrcmpiA DeleteCriticalSection lstrlenW WideCharToMultiByte InterlockedDecrement EnterCriticalSection LeaveCriticalSection InitializeCriticalSection CreateMutexA UnmapViewOfFile WaitForSingleObject ReleaseMutex DisableThreadLibraryCalls GetVersion GetCommandLineA VirtualProtect GetACP

user32

FillRect PostQuitMessage GetFocus LoadIconW EnumChildWindows LoadCursorW RegisterClassW GetKeyboardLayout ClientToScreen DispatchMessageW GetDlgItem EndDialog SetScrollRange SetScrollPos SetDlgItemTextW LoadStringW GetDlgItemTextW GetParent TranslateMessage IsDialogMessageW GetMessageW GetSysColor AdjustWindowRectEx SetRect GetScrollInfo UnregisterClassW InvalidateRect IsWindowEnabled SendDlgItemMessageW EnableWindow ReleaseCapture ShowCursor SetFocus DestroyWindow CreateWindowExW KillTimer SetTimer ShowWindow SendMessageW GetSystemMetrics DrawFocusRect GetWindowRect GetClientRect SetWindowLongW GetWindowLongW ReleaseDC GetDC GetWindowDC MapWindowPoints BeginPaint EndPaint GetMessagePos PtInRect DefWindowProcW SetCapture GetUpdateRect WindowFromPoint ScreenToClient GetCursorPos GetMessageTime GetAsyncKeyState ValidateRect GetWindowTextLengthW GetWindowTextW MoveWindow

advapi32

RegCloseKey RegCreateKeyExW RegSetValueExW RegEnumValueW CryptReleaseContext CryptDestroyHash CryptGetHashParam CryptHashData CryptCreateHash CryptAcquireContextW RegCreateKeyExA

gdi32

DeleteDC CreateCompatibleDC CreateCompatibleBitmap TextOutW GetTextAlign GetCharWidth32W GetFontData GetTextExtentPoint32W SetBkMode SetTextAlign GetDeviceCaps GetTextMetricsW SelectObject DeleteObject CreateFontIndirectW SetBkColor SetTextColor CreateSolidBrush UnrealizeObject BitBlt

ole32

OleInitialize OleUninitialize CoCreateInstance CoTaskMemFree CoTaskMemAlloc CoTaskMemRealloc CoUninitialize

rpcrt4

NdrProxyGetBuffer UuidFromStringA NdrConformantArrayMarshall NdrComplexArrayMarshall NdrInterfacePointerMarshall NdrPointerBufferSize NdrPointerMarshall NdrPointerUnmarshall NdrInterfacePointerUnmarshall NdrConformantArrayUnmarshall NdrPointerFree NdrInterfacePointerFree NdrComplexStructBufferSize NdrInterfacePointerBufferSize NdrConformantArrayBufferSize NdrComplexArrayBufferSize NdrComplexStructMarshall RpcRaiseException NdrComplexStructUnmarshall NdrComplexArrayUnmarshall NdrStubInitialize NdrUserMarshalUnmarshall NdrStubGetBuffer NdrUserMarshalFree NdrProxyInitialize NdrUserMarshalBufferSize NdrConvert NdrUserMarshalMarshall NdrProxySendReceive NdrProxyFreeBuffer

msvcrt

__CxxFrameHandler _except_handler3 _adjust_fdiv malloc _initterm free sprintf memmove memset _vsnwprintf memcpy towupper exit _ismbblead _cexit calloc realloc _wcsupr wcsstr _wtol _XcptFilter atoi