jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]47b0b8861edc1159f04285ad68d54b4d

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.47b0b8861edc1159f04285ad68d54b4d
Size 87KB
Sample261014-c132dseb78
SHA256 5ba34ff8da2bde51becfd1f2bc11b06a276407959d7f87ec4d3176d05feee88f
MD5 47b0b8861edc1159f04285ad68d54b4d
SHA1 02ed8e9bbbd6295ff7bcfe6a2d8af79c32aa8698
SHA512 bdbdf3b1d3f86581c25d00617e1bb24d5713d1e23092d9af74fbabf5ca96b6a81c54037ab48c560580ff71520c03e21f77300ca8d41e1f6f36548a46b5fe095d
SSDEEP 1536:B/RXMI+EetPFeYQJpT3L6W6k2VM6jnEU4UMGZBD0oC/lDtW:veD7Q7fEM6rEjUvEoCto
TLSH
T1EE938D72B6940C54D4DCB13589A78B242B38FC22871CA7D727D07A6F5E31AE2CE72359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.47b0b8861edc1159f04285ad68d54b4d

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.47b0b8861edc1159f04285ad68d54b4d

.exe 87KB

jaffacakes118_HEUR.Trojan.Win32.Generic.47b0b8861edc1159f04285ad68d54b4d

IMPHASH b0a9677ea9704da7d714f2225234c27e
SHA256 5ba34ff8da2bde51becfd1f2bc11b06a276407959d7f87ec4d3176d05feee88f
MD5 47b0b8861edc1159f04285ad68d54b4d
SHA1 02ed8e9bbbd6295ff7bcfe6a2d8af79c32aa8698
SHA512 bdbdf3b1d3f86581c25d00617e1bb24d5713d1e23092d9af74fbabf5ca96b6a81c54037ab48c560580ff71520c03e21f77300ca8d41e1f6f36548a46b5fe095d
SSDEEP 1536:B/RXMI+EetPFeYQJpT3L6W6k2VM6jnEU4UMGZBD0oC/lDtW:veD7Q7fEM6rEjUvEoCto
TLSH
T1EE938D72B6940C54D4DCB13589A78B242B38FC22871CA7D727D07A6F5E31AE2CE72359
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

53167

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar LoadLibraryA HeapReAlloc VirtualAlloc HeapAlloc CloseHandle GetACP GetCPInfo WriteFile RtlUnwind HeapFree VirtualFree HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetProcAddress QueryPerformanceCounter GetCommandLineA LockResource GetOEMCP GetTickCount GetEnvironmentStrings WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA UnhandledExceptionFilter GetModuleHandleA GetStartupInfoA GetVersion ExitProcess TerminateProcess GetCurrentProcess GetStringTypeW

user32

EndPaint PostQuitMessage LoadAcceleratorsA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA LoadCursorA RegisterClassExA GetSystemMetrics CreateWindowExA ShowWindow UpdateWindow LoadStringA DefWindowProcA DestroyWindow wsprintfA BeginPaint GetClientRect DrawTextA

gdi32

Rectangle SetPixel TextOutA CreateBitmap

advapi32

RegCloseKey RegOpenKeyExA RegQueryValueExA

shell32

StrStrIA StrRChrA

ole32

CoUninitialize CoInitialize

Sharing