jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]499ffecd0ecb1fb9c4bc80cd1a624f52

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.499ffecd0ecb1fb9c4bc80cd1a624f52
Size 254KB
Sample261014-c33hmseb86
SHA256 2d022d0d1c6b8c7aa79baf75e12bfab84dda5a61d15304b04c62434e9b976c26
MD5 499ffecd0ecb1fb9c4bc80cd1a624f52
SHA1 d7874ae9567c3f965a64c9fe9d001a9f40df47ea
SHA512 a2b0328b1990995efb5383ffb90306c7f7893cea5f9abd7b00c3817ce5d896d4481ae8e34fc69aa981964befffa0e303982e13520b8f86e1c3d5eadd9f59e6b2
SSDEEP 6144:/2ohLCmYPcHxW111++kTb2mZbNTm3KWNol9t:/2XEq1g/2mZs6WNoN
TLSH
T144442473A101DB68CCE540F22CE71F9834425E6BBC6D1037235A3A66663C9E33E927B5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.499ffecd0ecb1fb9c4bc80cd1a624f52

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.499ffecd0ecb1fb9c4bc80cd1a624f52

.exe 254KB

jaffacakes118_HEUR.Trojan.Win32.Generic.499ffecd0ecb1fb9c4bc80cd1a624f52

IMPHASH 78499726d76d101ad6531ba36fcc543f
SHA256 2d022d0d1c6b8c7aa79baf75e12bfab84dda5a61d15304b04c62434e9b976c26
MD5 499ffecd0ecb1fb9c4bc80cd1a624f52
SHA1 d7874ae9567c3f965a64c9fe9d001a9f40df47ea
SHA512 a2b0328b1990995efb5383ffb90306c7f7893cea5f9abd7b00c3817ce5d896d4481ae8e34fc69aa981964befffa0e303982e13520b8f86e1c3d5eadd9f59e6b2
SSDEEP 6144:/2ohLCmYPcHxW111++kTb2mZbNTm3KWNol9t:/2XEq1g/2mZs6WNoN
TLSH
T144442473A101DB68CCE540F22CE71F9834425E6BBC6D1037235A3A66663C9E33E927B5
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WideCharToMultiByte GetVersionExA SetFileTime LeaveCriticalSection SetFileAttributesA OpenEventA SetUnhandledExceptionFilter GetDiskFreeSpaceA GetTickCount SetFilePointer FindClose SetLastError GetDriveTypeA GetSystemDirectoryA GetCurrentThreadId GetCurrentProcessId SuspendThread DeleteCriticalSection GetCommandLineA lstrcpynA QueryPerformanceCounter FindFirstFileA CopyFileA GetCurrentDirectoryA SystemTimeToFileTime TerminateProcess CreateProcessA QueryDosDeviceA SetHandleContext DeviceIoControl GetProcAddress GetSystemTimeAsFileTime GetCurrentThreadId GetProcessHeap CreateThread ExpandEnvironmentStringsA DeleteFileA Sleep SetFileAttributesA DosDateTimeToFileTime SetThreadAffinityMask GetSystemTime HeapAlloc MoveFileA FreeLibrary ExitProcess ReadFile CloseHandle MoveFileExA HeapFree FindNextFileA SetErrorMode BackupWrite LocalFileTimeToFileTime RemoveDirectoryA GetFileAttributesA SetEvent CreateFileA VirtualQuery WriteFile GetFileSize EnterCriticalSection GetExitCodeProcess CreateEventA SetEndOfFile

user32

EndDialog ShowWindow MessageBoxA SetParent SendMessageA LoadStringA SendDlgItemMessageA DialogBoxParamA

advapi32

GetLengthSid AddAccessAllowedAce InitializeSecurityDescriptor CryptAcquireContextA GetTokenInformation CryptGenRandom CryptReleaseContext SetSecurityDescriptorDacl InitiateSystemShutdownA OpenProcessToken AllocateAndInitializeSid InitializeAcl

ntdll

NtClose NtOpenProcessToken NtShutdownSystem NtAdjustPrivilegesToken

shell32

SHGetPathFromIDListA SHBrowseForFolderA