jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4a233d71d08abed4dfb62

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4a233d71d08abed4dfb62
Size 312KB
Sample261014-c537ysvs6p
SHA256 8793b02f9b7fad06df12e7773abf4473c64d373d425c836aed2406555acb40ef
MD5 2d5dc8ff54d4a233d71d08abed4dfb62
SHA1 b684863e19860ff6540a2e49b7b34c9be35ad51f
SHA512 14fe26d24181aba70415ebe1ba91b55b04f9f93bf454afc2a60a957785714136da756dc55b61de80acd09396bd721fe390870c886894d4ad215a242f460720e3
SSDEEP 6144:mckBY74u2Zgu/oAOrJ5CiitIJo2ZxmjYftEB:mNY74/gH7oiitLZ8FEB
TLSH
T18864BE2178D2C872D1B3193405F4A7712A7EB9614B389AEF57D40B7E4EB42C26A31F63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4a233d71d08abed4dfb62

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4a233d71d08abed4dfb62

.exe 312KB

jaffacakes118_HEUR.Trojan.Win32.Generic.4a233d71d08abed4dfb62

IMPHASH 33b412eb0ccf59517cb6c9b4302ed662
SHA256 8793b02f9b7fad06df12e7773abf4473c64d373d425c836aed2406555acb40ef
MD5 2d5dc8ff54d4a233d71d08abed4dfb62
SHA1 b684863e19860ff6540a2e49b7b34c9be35ad51f
SHA512 14fe26d24181aba70415ebe1ba91b55b04f9f93bf454afc2a60a957785714136da756dc55b61de80acd09396bd721fe390870c886894d4ad215a242f460720e3
SSDEEP 6144:mckBY74u2Zgu/oAOrJ5CiitIJo2ZxmjYftEB:mNY74/gH7oiitLZ8FEB
TLSH
T18864BE2178D2C872D1B3193405F4A7712A7EB9614B389AEF57D40B7E4EB42C26A31F63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

29052

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc GetCurrentProcess RaiseException GetLastError ResetEvent PulseEvent GetNativeSystemInfo lstrlenA lstrlenW LoadLibraryW FindAtomA GetComputerNameW GetVersionExA FindFirstVolumeMountPointW SetThreadLocale SetConsoleMode AddConsoleAliasA WriteConsoleW GetConsoleCP FlushFileBuffers HeapSize SetFilePointerEx SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo CloseHandle SetEvent WaitForSingleObjectEx IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead TerminateProcess RtlUnwind FreeLibrary LoadLibraryExW HeapAlloc HeapFree HeapReAlloc ExitProcess GetModuleHandleExW GetModuleFileNameA GetStdHandle WriteFile GetACP ReadFile GetConsoleMode ReadConsoleW GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP CreateFileW

user32

DrawEdge DefFrameProcW DestroyCursor LoadCursorFromFileW SetWindowsHookW UpdateWindow SetMenuInfo LoadMenuW MapVirtualKeyA ReplyMessage PostMessageW DrawCaption

ole32

OleLoadFromStream

Sharing