jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4a9b91c71f603f83a7ac9d47b5fed820

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4a9b91c71f603f83a7ac9d47b5fed820
Size 77KB
Sample261014-c71vlsxvht
SHA256 3f23e041d972b45666f6b47c6e2a5cd68833f4e482d2d012b59c41ee5ef49c18
MD5 4a9b91c71f603f83a7ac9d47b5fed820
SHA1 6fa2770284e0c79bcb182f017e5385619005d99a
SHA512 b5ba68667b14b5004e1e7ae1339120c785fbbf703fce52212e026fddbce3536fd743e68231113c58b440a29cbb56f863aa5e3ce7083d0ef270b4ea107f85ebea
SSDEEP 1536:NxZcgHVwRMkS0zsYZcqfdzuxvPYde/OKNj6zyuwQ++iE8o6JlIK:DCrSYsqX1zuZPd2KFP7fE8o6JlIK
TLSH
T16C73E044B5A8846BC1B1437240EB9F0A777AAC611FB4AB6713A4FA1F6D316C04F37792
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4a9b91c71f603f83a7ac9d47b5fed820

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4a9b91c71f603f83a7ac9d47b5fed820

.exe 77KB

jaffacakes118_HEUR.Trojan.Win32.Generic.4a9b91c71f603f83a7ac9d47b5fed820

IMPHASH c754bf15947b6210f21669d1858e1251
SHA256 3f23e041d972b45666f6b47c6e2a5cd68833f4e482d2d012b59c41ee5ef49c18
MD5 4a9b91c71f603f83a7ac9d47b5fed820
SHA1 6fa2770284e0c79bcb182f017e5385619005d99a
SHA512 b5ba68667b14b5004e1e7ae1339120c785fbbf703fce52212e026fddbce3536fd743e68231113c58b440a29cbb56f863aa5e3ce7083d0ef270b4ea107f85ebea
SSDEEP 1536:NxZcgHVwRMkS0zsYZcqfdzuxvPYde/OKNj6zyuwQ++iE8o6JlIK:DCrSYsqX1zuZPd2KFP7fE8o6JlIK
TLSH
T16C73E044B5A8846BC1B1437240EB9F0A777AAC611FB4AB6713A4FA1F6D316C04F37792
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

53109

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar LoadLibraryA GetProcAddress HeapReAlloc VirtualAlloc HeapAlloc GetCommandLineA GetACP GetCPInfo WriteFile RtlUnwind HeapFree VirtualFree HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW FindResourceA LoadResource CloseHandle GetCurrentProcessId QueryPerformanceCounter GetCurrentThreadId GetTickCount GetOEMCP GetSystemTimeAsFileTime GetEnvironmentStrings WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA GetModuleHandleA GetStartupInfoA GetVersion ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetStringTypeW

user32

wsprintfA LoadAcceleratorsA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA LoadCursorA LoadIconA RegisterClassExA CreateWindowExA ShowWindow UpdateWindow LoadStringA GetClientRect DefWindowProcA DestroyWindow BeginPaint DrawTextA EndPaint PostQuitMessage GetSystemMetrics

gdi32

Rectangle SetPixel TextOutA CreateBitmap

advapi32

RegCloseKey RegOpenKeyExA RegQueryValueExA

shell32

StrStrIA StrRChrA

ole32

CoInitialize

Sharing