jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]2fb412ddd5d522bf401d0279401172e8

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.2fb412ddd5d522bf401d0279401172e8
Size 332KB
Sample261014-bgl34aew4j
SHA256 4a4b18f28a5ebf785ac39673303b771f6aec3a06b5126294b0f5c1c1e454391c
MD5 2fb412ddd5d522bf401d0279401172e8
SHA1 c07b438cb21319c39bdc16c64e456a6396407a74
SHA512 0975fa2a59f5598fb4bd6f758c0924bf5051af8abc8a53a9a11c0ac67de7b6af18921013b40a64e3ee7787844947527a9c87748ef502301b83f15d9210bcf59d
SSDEEP 6144:fOuaRiZiamv9L3UYIBCDfp0V0Afh1nelUTb0RN/p0T:GHMLmv9zjpzAfh9Mjp
TLSH
T1E474E06033E49061E0FA2E341DB70391DA36FE052E36E68F5390775E1D72A95ADF0B22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.2fb412ddd5d522bf401d0279401172e8

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2fb412ddd5d522bf401d0279401172e8

.exe 332KB

jaffacakes118_HEUR.Trojan.Win32.Generic.2fb412ddd5d522bf401d0279401172e8

IMPHASH e04febe3beda3357a65446026400c3f1
SHA256 4a4b18f28a5ebf785ac39673303b771f6aec3a06b5126294b0f5c1c1e454391c
MD5 2fb412ddd5d522bf401d0279401172e8
SHA1 c07b438cb21319c39bdc16c64e456a6396407a74
SHA512 0975fa2a59f5598fb4bd6f758c0924bf5051af8abc8a53a9a11c0ac67de7b6af18921013b40a64e3ee7787844947527a9c87748ef502301b83f15d9210bcf59d
SSDEEP 6144:fOuaRiZiamv9L3UYIBCDfp0V0Afh1nelUTb0RN/p0T:GHMLmv9zjpzAfh9Mjp
TLSH
T1E474E06033E49061E0FA2E341DB70391DA36FE052E36E68F5390775E1D72A95ADF0B22
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

ws2_32

recvfrom send sendto recv ntohs ioctlsocket inet_ntoa inet_addr htons htonl getservbyport getservbyname gethostbyname gethostbyaddr connect closesocket bind accept WSAStringToAddressA WSAStartup WSASetLastError WSAGetLastError WSACleanup WSAAsyncSelect socket

kernel32

FreeConsole FreeEnvironmentStringsA FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameW GetConsoleWindow GetCurrentProcess GetCurrentThread GetCurrentThreadId GetEnvironmentStringsA GetEnvironmentStringsW GetEnvironmentVariableA GetEnvironmentVariableW GetFileType GetLastError GetLocalTime GetLocaleInfoA GetLocaleInfoW GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetProcessVersion GetStartupInfoA GetStartupInfoW GetStdHandle GetStringTypeA GetStringTypeW GetSystemDirectoryA GetSystemDirectoryW GetSystemTime GetSystemTimeAsFileTime GetTimeZoneInformation GetUserDefaultLCID GetVersion GetVersionExA GetVersionExW GetWindowsDirectoryA GlobalAddAtomW GlobalAlloc GlobalDeleteAtom GlobalFindAtomW GlobalFlags GlobalFree GlobalGetAtomNameW GlobalHandle GlobalLock GlobalReAlloc GlobalUnlock HeapAlloc HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize InitializeCriticalSection InterlockedCompareExchange InterlockedDecrement InterlockedExchange InterlockedIncrement IsBadCodePtr IsBadReadPtr IsBadWritePtr IsValidCodePage IsValidLocale LCMapStringA LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryW LocalAlloc LocalFree LocalReAlloc MultiByteToWideChar RaiseException ReadFile ReleaseMutex RtlUnwind SetConsoleCtrlHandler SetEnvironmentVariableA SetErrorMode SetEvent SetFilePointer FlushFileBuffers SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW WriteProfileStringW lstrcatW lstrcmpA lstrcmpW lstrcmpiA lstrcmpiW lstrcpyW lstrcpynW lstrlenA lstrlenW CloseHandle CompareStringA CompareStringW CreateEventA CreateEventW SetHandleCount CreateFileA CreateMutexA DeleteCriticalSection DeleteFileA EnterCriticalSection EnumSystemLocalesA ExitProcess

user32

EnableWindow EndDeferWindowPos EnumThreadWindows EnumWindows EqualRect GetActiveWindow GetCapture GetClassInfoW GetClassNameW GetClientRect GetCursorPos GetDC GetDesktopWindow GetDlgCtrlID GetDlgItem GetFocus GetForegroundWindow GetKeyState GetLastActivePopup GetMenu GetMenuCheckMarkDimensions GetMenuItemCount GetMenuItemID GetMenuState GetMessagePos GetMessageTime GetMessageW GetNextDlgTabItem GetParent GetPropW GetSubMenu GetSysColor GetSysColorBrush GetSystemMetrics GetTopWindow GetWindow GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextW GrayStringW InvalidateRect IsIconic IsWindow IsWindowEnabled IsWindowVisible KillTimer LoadAcceleratorsW LoadBitmapW LoadCursorW LoadIconW LoadMenuW LoadStringW MapWindowPoints EnableMenuItem ModifyMenuW PeekMessageW PostMessageW PostQuitMessage PtInRect RegisterClassW RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ReuseDDElParam ScreenToClient SendMessageTimeoutW SendMessageW SetActiveWindow SetCursor SetFocus SetForegroundWindow SetMenu SetMenuItemBitmaps SetPropW SetRectEmpty SetTimer SetWindowLongW SetWindowPos SetWindowTextW SetWindowsHookExW ShowOwnedPopups ShowWindow SystemParametersInfoW TabbedTextOutW TranslateAcceleratorW TranslateMessage UnhookWindowsHookEx UnpackDDElParam UnregisterClassW UpdateWindow ValidateRect WaitMessage WinHelpW wsprintfW DestroyWindow DestroyMenu DeferWindowPos DefWindowProcW CreateWindowExW CopyRect ClientToScreen CallWindowProcW CallNextHookEx BringWindowToTop BeginDeferWindowPos AdjustWindowRectEx DrawTextW MessageBoxW DispatchMessageW CheckMenuItem

gdi32

ScaleViewportExtEx SaveDC RestoreDC TextOutW SetWindowExtEx SetViewportOrgEx SetViewportExtEx SetTextColor SetMapMode SetBkColor SelectObject RectVisible PtVisible OffsetViewportOrgEx GetStockObject GetObjectW GetDeviceCaps GetClipBox ExtTextOutW Escape DeleteObject DeleteDC CreateBitmap ScaleWindowExtEx

winspool.drv

DocumentPropertiesW ord204 OpenPrinterW GetPrinterW GetPrinterDataW AddPrinterConnectionW ClosePrinter DeletePrinterConnectionW EnumPrintersW ord203

advapi32

RegDeleteKeyA CloseServiceHandle DeregisterEventSource EqualSid FreeSid SetThreadToken SetSecurityDescriptorDacl RevertToSelf ReportEventA RegisterEventSourceA RegSetValueExW RegSetValueExA RegQueryValueExW RegQueryValueExA RegQueryValueA RegOpenKeyW RegOpenKeyExW RegOpenKeyExA RegOpenKeyA RegNotifyChangeKeyValue RegEnumKeyExA AllocateAndInitializeSid RegCreateKeyExW RegCreateKeyExA RegCloseKey QueryServiceStatus OpenThreadToken OpenServiceW OpenSCManagerW OpenProcessToken LookupAccountSidW LookupAccountNameW IsValidSid InitializeSecurityDescriptor GetUserNameW GetTokenInformation GetSidSubAuthorityCount GetSidSubAuthority GetSidIdentifierAuthority

shell32

DragFinish DragQueryFileW

comctl32

ord17