jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]36ee48063bc8663a1342fefd7d49439c

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.36ee48063bc8663a1342fefd7d49439c
Size 85KB
Sample261014-bvqcnsd16w
SHA256 b13b1f4eb182037ed2f1b0e6d8d76741dfc847bfaa9427bf1a13e1cb67ab02d8
MD5 36ee48063bc8663a1342fefd7d49439c
SHA1 f9f1bbe4997e9c449e2d6b65a8c52a3a47f8387b
SHA512 e3d46c4fed5a3d1dc7f1c03b8b660c563583ad91a066bb03e5118e4f77392cd9984c5482e6e2d8f17b443c5e8cb89cdc8f85d19f96b4caac1bc3577eee949208
SSDEEP 1536:DU1rcTZY8lmEnBG+W78eFdLRj3ihLx7VLudIkOk3HwrDH:41rcdpoEn8nRriBNVLunHwrD
TLSH
T1A1836C10F2D0C072E06315364DB9D6B6962EBA72577984C3B7E40ABE5F712C0AE39367
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.36ee48063bc8663a1342fefd7d49439c

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.36ee48063bc8663a1342fefd7d49439c

.exe 85KB

jaffacakes118_HEUR.Trojan.Win32.Generic.36ee48063bc8663a1342fefd7d49439c

IMPHASH 5fb9d5d18d6f439872f51ba258575bd5
SHA256 b13b1f4eb182037ed2f1b0e6d8d76741dfc847bfaa9427bf1a13e1cb67ab02d8
MD5 36ee48063bc8663a1342fefd7d49439c
SHA1 f9f1bbe4997e9c449e2d6b65a8c52a3a47f8387b
SHA512 e3d46c4fed5a3d1dc7f1c03b8b660c563583ad91a066bb03e5118e4f77392cd9984c5482e6e2d8f17b443c5e8cb89cdc8f85d19f96b4caac1bc3577eee949208
SSDEEP 1536:DU1rcTZY8lmEnBG+W78eFdLRj3ihLx7VLudIkOk3HwrDH:41rcdpoEn8nRriBNVLunHwrD
TLSH
T1A1836C10F2D0C072E06315364DB9D6B6962EBA72577984C3B7E40ABE5F712C0AE39367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

25680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnterCriticalSection lstrcmpiA lstrlenA GetModuleFileNameA lstrcmpA GetProcAddress LoadLibraryA GetModuleHandleA VirtualProtect VirtualFree UnmapViewOfFile VirtualAlloc CloseHandle MapViewOfFileEx CreateFileMappingA OpenFileMappingA LeaveCriticalSection GetVersionExA SizeofResource LockResource LoadResource FindResourceA lstrcatA lstrcpyA FreeLibrary TerminateThread WaitForSingleObject GetFileAttributesExA ExpandEnvironmentStringsA GetTickCount lstrcpynA DeleteCriticalSection SearchPathA InitializeCriticalSection LCMapStringW GetLastError HeapFree HeapAlloc ExitThread GetCurrentThreadId CreateThread RtlUnwind RaiseException EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW HeapCreate GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent MultiByteToWideChar ReadFile SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement Sleep HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryW SetStdHandle FlushFileBuffers CreateFileA WriteConsoleW GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc SetEndOfFile GetProcessHeap CreateFileW GetStringTypeW

user32

GetParent

advapi32

RegSetValueExA RegCloseKey RegCreateKeyExA

ole32

CoInitialize

Sharing