jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4a037f781245f583de9e9e0f83303b26

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4a037f781245f583de9e9e0f83303b26
Size 191KB
Sample261014-c5qxmaxves
SHA256 4b8523492d9d06ebd9f8127b0414b249294dc08c9a8d70d0117ff363f134d4f5
MD5 4a037f781245f583de9e9e0f83303b26
SHA1 f83db552ad29266381694ec839da14653084ef3b
SHA512 cb1cbad1ddcc64c81e34fe1009b024c5a5300e221c6bea994d068961415da35db6a0d345f75ee1ac2a21fa9cec92b628c1935b2723d37d0030b07638c9f00471
SSDEEP 3072:cPrcNY+evWLpvP46kxl9NnBne6ItAKz1XOxf3tGcjeGShKuBaGirak5LXzgQzsOW:cANTevY4HdHIeKz1Of3njeG7ak5DzlzT
TLSH
T12E14E0F83550959FD0FE803069A399BBB3AD21D9C39449C6EE68533D2B6631CCC26F81
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4a037f781245f583de9e9e0f83303b26

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4a037f781245f583de9e9e0f83303b26

.exe 191KB

jaffacakes118_HEUR.Trojan.Win32.Generic.4a037f781245f583de9e9e0f83303b26

IMPHASH 32eaf6d488b5959a155945dfe3b3de64
SHA256 4b8523492d9d06ebd9f8127b0414b249294dc08c9a8d70d0117ff363f134d4f5
MD5 4a037f781245f583de9e9e0f83303b26
SHA1 f83db552ad29266381694ec839da14653084ef3b
SHA512 cb1cbad1ddcc64c81e34fe1009b024c5a5300e221c6bea994d068961415da35db6a0d345f75ee1ac2a21fa9cec92b628c1935b2723d37d0030b07638c9f00471
SSDEEP 3072:cPrcNY+evWLpvP46kxl9NnBne6ItAKz1XOxf3tGcjeGShKuBaGirak5LXzgQzsOW:cANTevY4HdHIeKz1Of3njeG7ak5DzlzT
TLSH
T12E14E0F83550959FD0FE803069A399BBB3AD21D9C39449C6EE68533D2B6631CCC26F81
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

gdiplus

GdipGetImageWidth GdipDisposeImage

user32

GetGUIThreadInfo GetWindowThreadProcessId AllowSetForegroundWindow GetPropW GetClassNameW GetForegroundWindow

ole32

CoGetProcessIdentifier StringFromGUID2 CoInitialize CoTaskMemAlloc CoUninitialize CoTaskMemFree

kernel32

LocalAlloc GetSystemDirectoryW QueryPerformanceCounter GetCalendarInfoW GetLongPathNameW ExpandEnvironmentStringsW GetSystemTimeAsFileTime SearchPathW OutputDebugStringW OpenProcess GetProcessHeap FindFirstFileW MapViewOfFile GetCurrentThreadId DeviceIoControl SetFileAttributesW GetProcessId SetLastError VirtualQuery GetCurrentProcessId InterlockedDecrement TlsAlloc UnhandledExceptionFilter InterlockedCompareExchange GetEnvironmentVariableW FreeLibrary GetLogicalDriveStringsW CreateFileW GetModuleHandleA SetUnhandledExceptionFilter ExitProcess TlsGetValue CloseHandle UnmapViewOfFile OpenEventW WideCharToMultiByte TerminateProcess InitializeCriticalSectionAndSpinCount HeapAlloc IsWow64Process LeaveCriticalSection GetProcAddress DecodePointer GetFileAttributesW EnumResourceNamesA QueryDosDeviceW DeleteCriticalSection GetModuleFileNameW EncodePointer LoadLibraryW GetCurrentProcess OutputDebugStringA GetCurrentDirectoryW MultiByteToWideChar GetModuleHandleW ReleaseMutex CreateDirectoryW GetModuleHandleExW GetFullPathNameW TlsSetValue InterlockedExchange TlsFree FindNextFileW SetEnvironmentVariableW GetFileSizeEx InitializeCriticalSection WaitForSingleObject lstrcmpiW GetWindowsDirectoryW InterlockedIncrement lstrlenW GetTickCount EnterCriticalSection GetLastError VirtualProtect HeapFree LocalFree Sleep FindClose WaitForSingleObjectEx DuplicateHandle CreateFileMappingW GetFileInformationByHandle CreateMutexW

advapi32

RegCreateKeyExW RegEnumKeyW EncryptFileW RegSetValueExW RegQueryInfoKeyW RegQueryValueExW RegEnumValueW DecryptFileW RegOpenKeyExW RegCloseKey

shlwapi

PathIsUNCW PathSkipRootW PathGetArgsW StrDupW SHRegGetValueW PathFindFileNameW