jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]31da6017ad9afe1ce6420699cf3ec045

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.31da6017ad9afe1ce6420699cf3ec045
Size 320KB
Sample261014-bmdnxaew8j
SHA256 b179e8be637e1123af78a67c0f907f1a657b8f61d81b8b819352eea5088d6c08
MD5 31da6017ad9afe1ce6420699cf3ec045
SHA1 2e345e2f8a3c070222745d9e76b7a828587dc54a
SHA512 9fc85214f7db1357c865f1363fbbc294a69b0d5f1613b3d3b8c8f396b66735c8a032ce600fc991c4b5f6a7942fda918289d6a99108a1ae3d4cf200da252d9633
SSDEEP 6144:CW066cRbtDvllqAupRFv0BcFDgz8xJZIQ2mE5BgpEtCHsTS:O6DlqvRFr1zv/ETg9z
TLSH
T11A64BE91B790C055E5AD06309D67C7E68A31FD11EF21E29F33883B5D6D727C0AEA0B26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.31da6017ad9afe1ce6420699cf3ec045

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.31da6017ad9afe1ce6420699cf3ec045

.exe 320KB

jaffacakes118_HEUR.Trojan.Win32.Generic.31da6017ad9afe1ce6420699cf3ec045

IMPHASH 7757df96a551166841030b8c155efa55
SHA256 b179e8be637e1123af78a67c0f907f1a657b8f61d81b8b819352eea5088d6c08
MD5 31da6017ad9afe1ce6420699cf3ec045
SHA1 2e345e2f8a3c070222745d9e76b7a828587dc54a
SHA512 9fc85214f7db1357c865f1363fbbc294a69b0d5f1613b3d3b8c8f396b66735c8a032ce600fc991c4b5f6a7942fda918289d6a99108a1ae3d4cf200da252d9633
SSDEEP 6144:CW066cRbtDvllqAupRFv0BcFDgz8xJZIQ2mE5BgpEtCHsTS:O6DlqvRFr1zv/ETg9z
TLSH
T11A64BE91B790C055E5AD06309D67C7E68A31FD11EF21E29F33883B5D6D727C0AEA0B26
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21709

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetPrivateProfileIntW GetPrivateProfileSectionW GetPrivateProfileStringA GetPrivateProfileStringW GetProcAddress GetProcessHeap GetSystemDefaultUILanguage GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTickCount GetUserDefaultUILanguage GetVersion GetVersionExA GetVersionExW GetWindowsDirectoryW GlobalFree HeapAlloc HeapFree InitializeCriticalSectionAndSpinCount InterlockedCompareExchange InterlockedDecrement InterlockedExchange IsDBCSLeadByte LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LoadResource LocalAlloc LocalFree GetModuleFileNameW LockResource MapViewOfFile MoveFileExW MoveFileW MultiByteToWideChar OpenEventW OutputDebugStringA OutputDebugStringW QueryPerformanceCounter ReadFile RemoveDirectoryW ResumeThread RtlUnwind SearchPathW SetFileAttributesW SetFilePointer SetLastError SetUnhandledExceptionFilter SizeofResource Sleep TerminateProcess UnhandledExceptionFilter UnmapViewOfFile WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcmpW lstrcmpiA lstrlenA lstrlenW GetLocaleInfoW GetLocalTime GetLastError GetFileSize GetFileAttributesW GetFileAttributesExW GetExitCodeThread GetCurrentThreadId GetCurrentProcessId GetCurrentProcess GetComputerNameW FreeLibrary FlushFileBuffers FindResourceW FindResourceExW FindNextFileW FindFirstFileW FindClose FileTimeToSystemTime ExpandEnvironmentStringsW EnumUILanguagesW EnterCriticalSection DisableThreadLibraryCalls DeleteFileW DeleteCriticalSection CreateThread CreateFileW CreateFileMappingW CreateDirectoryW CopyFileW CompareStringW CompareStringA LocalReAlloc CloseHandle

user32

MsgWaitForMultipleObjects PeekMessageW PostMessageW SendDlgItemMessageW SendMessageTimeoutW SetCursor SetTimer TranslateMessage LoadStringW LoadImageW KillTimer GetWindow GetTopWindow GetSystemMetrics GetMessageW GetClassNameA EndDialog DispatchMessageW DialogBoxParamW DestroyIcon CharNextW CharLowerW LoadCursorW

advapi32

RegOpenKeyExW EnumServicesStatusExW DuplicateTokenEx CreateProcessAsUserW CopySid ConvertStringSidToSidW CloseServiceHandle AllocateAndInitializeSid AdjustTokenPrivileges RegQueryInfoKeyW RegQueryValueExA RegQueryValueExW RegSaveKeyW RegSetValueExW RevertToSelf SetFileSecurityW SetSecurityDescriptorOwner GetLengthSid GetTokenInformation ImpersonateLoggedOnUser InitializeSecurityDescriptor LookupPrivilegeNameW LookupPrivilegeValueW OpenProcessToken OpenSCManagerW RegCloseKey RegCreateKeyExW RegDeleteValueW RegEnumKeyExW RegEnumKeyW RegEnumValueW RegOpenKeyExA FreeSid

shlwapi

StrTrimW StrToIntW StrToIntExW StrStrW ChrCmpIA PathAddBackslashW PathAddExtensionW PathAppendW PathCombineW PathFileExistsW PathFindExtensionW PathFindFileNameW PathFindNextComponentW PathGetCharTypeW PathGetDriveNumberW PathIsDirectoryW PathIsFileSpecW PathIsPrefixW PathIsRootW PathIsUNCServerW PathIsURLW PathRemoveBackslashW PathRemoveBlanksW PathRemoveExtensionW PathRemoveFileSpecW PathRenameExtensionW PathSkipRootW PathUnquoteSpacesW SHDeleteEmptyKeyW SHDeleteKeyW SHDeleteValueW SHGetValueW StrStrIW SHSetValueW StrChrIW StrChrW StrCmpIW StrCmpNIW StrCmpNW StrCmpW StrDupW StrRChrW StrRetToStrW StrSpnW SHQueryValueExW

ole32

StringFromGUID2 CreateBindCtx CoUninitialize CoTaskMemRealloc CoTaskMemFree CoTaskMemAlloc CoInitializeEx CoCreateInstance CoCreateGuid

oleaut32

VariantInit SysStringByteLen VariantCopy VariantClear VariantChangeType SysStringLen SafeArrayAccessData SafeArrayCreate SafeArrayDestroy SafeArrayPutElement SafeArrayUnaccessData SysAllocString SysAllocStringByteLen SysFreeString

shell32

SHGetDesktopFolder ShellExecuteExW SHChangeNotify

setupapi

SetupCloseInfFile SetupFindFirstLineW SetupFindNextLine SetupGetBinaryField SetupGetIntField SetupGetLineTextW SetupGetStringFieldW SetupOpenInfFileW