jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]2f6d43b4ad3facc2f9cfe6aa71c566ec

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.2f6d43b4ad3facc2f9cfe6aa71c566ec
Size 456KB
Sample261014-bfpsladz2x
SHA256 64c56218a984ab309cc1ae6bd64ca77288a26368b28057d2fd27c865880a3171
MD5 2f6d43b4ad3facc2f9cfe6aa71c566ec
SHA1 591b5453b271cc22c0c91d9544e67c3289b3774e
SHA512 fd1bbfee3e7385c4a903a49a019d69ea90494c97590e607471c30536d2755aa221411cb5f5479bf8e908482ebb945c342ed1e0881ae949f6b8083957d747180b
SSDEEP 6144:TJ19q+R5wlde/s26vn+kYOfH9y5/iGjls99CP/PG0psT2vACiyEGT41UlbF1g/MV:Tn9qcs29y9caG56uSytHTyUhF
TLSH
T16AA4F2255911B8E3FAEADFB142897778917532731A837BCBB07031C90D7E2D67A0280D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.2f6d43b4ad3facc2f9cfe6aa71c566ec

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2f6d43b4ad3facc2f9cfe6aa71c566ec

.exe 456KB

jaffacakes118_HEUR.Trojan.Win32.Generic.2f6d43b4ad3facc2f9cfe6aa71c566ec

IMPHASH e053dc98b375e1dcae5fbaffd8e236d8
SHA256 64c56218a984ab309cc1ae6bd64ca77288a26368b28057d2fd27c865880a3171
MD5 2f6d43b4ad3facc2f9cfe6aa71c566ec
SHA1 591b5453b271cc22c0c91d9544e67c3289b3774e
SHA512 fd1bbfee3e7385c4a903a49a019d69ea90494c97590e607471c30536d2755aa221411cb5f5479bf8e908482ebb945c342ed1e0881ae949f6b8083957d747180b
SSDEEP 6144:TJ19q+R5wlde/s26vn+kYOfH9y5/iGjls99CP/PG0psT2vACiyEGT41UlbF1g/MV:Tn9qcs29y9caG56uSytHTyUhF
TLSH
T16AA4F2255911B8E3FAEADFB142897778917532731A837BCBB07031C90D7E2D67A0280D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39223

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathIsDirectoryW PathFileExistsA PathAddBackslashW PathFileExistsW PathRemoveFileSpecW PathRemoveFileSpecA

kernel32

GetSystemTimeAsFileTime GetCurrentProcessId GetStartupInfoA ExitProcess GetTickCount CreateEventW QueryPerformanceCounter GlobalMemoryStatus GetDiskFreeSpaceExW GetLongPathNameA Process32First Process32Next OpenProcess OpenThread SuspendThread ResumeThread lstrcpyA CreateToolhelp32Snapshot Thread32First Thread32Next LCMapStringW GetModuleFileNameW CreateDirectoryW SetFileAttributesW CreateDirectoryA SetFileAttributesA OutputDebugStringW OutputDebugStringA GetModuleFileNameA SetCurrentDirectoryA GetCommandLineA GetModuleHandleA GetConsoleOutputCP GetPriorityClass

user32

DestroyWindow FindWindowW SendMessageA PostMessageA EnableWindow PeekMessageA GetDesktopWindow RegisterClassA GetWindowTextA GetWindowThreadProcessId IsIconic GetMessageA EnumThreadWindows wvsprintfW DispatchMessageA TranslateMessage LoadIconA LoadCursorA RegisterClassExA FindWindowA CreateWindowExA ShowWindow UpdateWindow BeginPaint EndPaint PostQuitMessage DefWindowProcA UnregisterClassA IsWindowVisible

gdi32

SetStretchBltMode StretchBlt DeleteDC CreateCompatibleBitmap DeleteObject SelectObject CreateCompatibleDC CreateDIBSection GetDIBits CreateDCW BitBlt SetBkColor CreateBitmap CreateSolidBrush GetFontData SetBrushOrgEx GetObjectW

setupapi

SetupDiGetClassDevsA SetupDiEnumDeviceInfo SetupDiGetDeviceRegistryPropertyA