jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]49fb3def5e236e999249acd896a04b57

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.49fb3def5e236e999249acd896a04b57
Size 120KB
Sample261014-c5cd8sew7s
SHA256 489b1744d3d43f4e81b02544cd116461331fcc165b6efa0096ddd8b8ea535225
MD5 49fb3def5e236e999249acd896a04b57
SHA1 8c52fcd041d35808ee852a959fceb35e8f963ea9
SHA512 04270b63d53c790e81235481a9fee8ee72344752c1825933308fd98b170e4de4b8269a08b9349fa2fe8c49005ea3515da84fd30feea4892ac747e9b944435415
SSDEEP 3072:/bTsn5YGhaW+x8qoSnsiyEg0JslRaRGxf2rIahT8w:/K3hpGsQglxfCIi
TLSH
T180C3D19A3C4C58E3C1C50B3CF2BAE6F5009F78BD8244A24B61D4DD15725FB82B616753
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.49fb3def5e236e999249acd896a04b57

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.49fb3def5e236e999249acd896a04b57

.exe 120KB

jaffacakes118_HEUR.Trojan.Win32.Generic.49fb3def5e236e999249acd896a04b57

IMPHASH 76ddcbb18330cd6559062a25d6a3dd30
SHA256 489b1744d3d43f4e81b02544cd116461331fcc165b6efa0096ddd8b8ea535225
MD5 49fb3def5e236e999249acd896a04b57
SHA1 8c52fcd041d35808ee852a959fceb35e8f963ea9
SHA512 04270b63d53c790e81235481a9fee8ee72344752c1825933308fd98b170e4de4b8269a08b9349fa2fe8c49005ea3515da84fd30feea4892ac747e9b944435415
SSDEEP 3072:/bTsn5YGhaW+x8qoSnsiyEg0JslRaRGxf2rIahT8w:/K3hpGsQglxfCIi
TLSH
T180C3D19A3C4C58E3C1C50B3CF2BAE6F5009F78BD8244A24B61D4DD15725FB82B616753
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

51124

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

waveOutWrite waveOutUnprepareHeader waveOutReset waveOutPrepareHeader waveOutOpen waveOutGetPosition waveOutGetNumDevs waveOutGetDevCapsW waveOutGetDevCapsA waveOutClose waveInUnprepareHeader waveInStart waveInReset waveInPrepareHeader waveInOpen waveInGetNumDevs waveInGetDevCapsW waveInGetDevCapsA waveInAddBuffer timeSetEvent timeKillEvent timeEndPeriod timeBeginPeriod mciSendCommandA

advapi32

InitializeSecurityDescriptor AddAce SetSecurityDescriptorDacl SetFileSecurityW RegQueryValueExA RegOpenKeyExA RegOpenKeyA RegEnumKeyA RegCloseKey OpenProcessToken AddAccessAllowedAce InitializeAcl GetTokenInformation GetSecurityDescriptorDacl GetLengthSid GetAclInformation GetAce EqualSid AllocateAndInitializeSid

user32

AdjustWindowRect CharLowerBuffA CharToOemA ClientToScreen wsprintfA UpdateWindow TranslateMessage ShowWindow ShowCursor SetWindowPos SetRect SetClipboardData ScreenToClient ReleaseDC RegisterWindowMessageA RegisterClassA PostThreadMessageA PeekMessageA OpenClipboard MsgWaitForMultipleObjects MessageBoxW LoadIconA LoadCursorA GetSystemMetrics GetQueueStatus GetForegroundWindow GetDC GetClipboardData EmptyClipboard DispatchMessageA DestroyWindow DefWindowProcA CreateWindowExA CloseClipboard

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA

ws2_32

socket send select recv listen ioctlsocket inet_addr htons htonl connect closesocket bind accept WSAStartup WSAGetLastError WSACleanup WSACancelAsyncRequest WSAAsyncGetHostByName

dinput

DirectInputCreateW

kernel32

RaiseException QueryPerformanceFrequency QueryPerformanceCounter ReadFile ReleaseSemaphore RemoveDirectoryW ResumeThread RtlUnwind SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetEvent SetFilePointer SetFileTime SetHandleCount SetLastError SetStdHandle SetThreadAffinityMask SetThreadIdealProcessor SetThreadPriority SetUnhandledExceptionFilter SetWaitableTimer Sleep PeekNamedPipe OutputDebugStringA OpenFile OpenEventA MultiByteToWideChar MulDiv MoveFileA TerminateProcess LeaveCriticalSection LCMapStringW LCMapStringA IsValidLocale IsValidCodePage IsDebuggerPresent InterlockedIncrement InterlockedExchange InterlockedDecrement InitializeCriticalSectionAndSpinCount HeapSize HeapReAlloc HeapFree HeapCreate HeapAlloc GlobalUnlock GlobalLock GlobalAlloc GetWindowsDirectoryA GetVersionExA GetUserDefaultLangID GetUserDefaultLCID GetTimeZoneInformation GetTimeFormatA GetTickCount GetThreadPriority GetTempPathW GetSystemTimeAsFileTime GetSystemInfo GetSystemDirectoryA GetSystemDefaultLangID GetStringTypeW GetStringTypeA GetStartupInfoA GetProcessHeap lstrlenA WriteFile WriteConsoleW WriteConsoleA WideCharToMultiByte WaitForSingleObject WaitForMultipleObjects VirtualFree VirtualAlloc UnhandledExceptionFilter TryEnterCriticalSection TlsSetValue TlsGetValue TlsFree LoadLibraryA FindNextFileA AreFileApisANSI CloseHandle CompareStringA CompareStringW CreateDirectoryA CreateDirectoryW CreateEventA CreateFileA CreateFileW CreateMutexA CreatePipe CreateProcessA CreateSemaphoreA CreateThread DeleteCriticalSection DeleteFileA DeviceIoControl DuplicateHandle EnterCriticalSection EnumSystemLocalesA ExitProcess ExitThread FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileW GetOverlappedResult FindNextFileW FlushFileBuffers FormatMessageA FreeEnvironmentStringsA FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetConsoleCP GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryA GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatA GetDriveTypeA GetEnvironmentStringsA GetEnvironmentStringsW GetExitCodeProcess GetExitCodeThread GetFileAttributesA GetFileInformationByHandle GetFileSize GetFileType GetFullPathNameA GetLastError GetLocaleInfoA GetLocaleInfoW GetModuleFileNameA GetModuleHandleA GetModuleHandleW GetOEMCP TlsAlloc

shell32

SHGetSpecialFolderPathW ShellExecuteA SHFileOperationW

ole32

CLSIDFromString CoCreateInstance CoInitialize CoTaskMemAlloc CoTaskMemFree CoUninitialize IsEqualGUID PropVariantClear