jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4a788ba231006e6ffc5825163c2d494d

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4a788ba231006e6ffc5825163c2d494d
Size 78KB
Sample261014-c7mb8avs8p
SHA256 395ffe16135ebb7e180b0c9097101097ceb83d2564bc0c127f6db6b0cf07ab71
MD5 4a788ba231006e6ffc5825163c2d494d
SHA1 da9dd551001104c5d4cc5f427ad5a1d50cc6293b
SHA512 d873b283eee92041a78f27b26c5081a835c04ff768db6a4eac2b8f6d2b9b3f1ff5976fea0de66d8503f7fa26f1ab5aa733d0979307d8ad09553e999ef1bf9f91
SSDEEP 1536:NBuE6ZQEUF05vRmK6jvJt8skOIcWqQ71QliomJlIK:mE6WEUyAK69tigQ5KiomJlIK
TLSH
T15073D081B8E88456C8C2863151B7AF617B367C724A78E3E32BD1699E3D314C51E3379B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4a788ba231006e6ffc5825163c2d494d

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4a788ba231006e6ffc5825163c2d494d

.exe 78KB

jaffacakes118_HEUR.Trojan.Win32.Generic.4a788ba231006e6ffc5825163c2d494d

IMPHASH 8eda5e9b557216612e9f1cc0a56d893b
SHA256 395ffe16135ebb7e180b0c9097101097ceb83d2564bc0c127f6db6b0cf07ab71
MD5 4a788ba231006e6ffc5825163c2d494d
SHA1 da9dd551001104c5d4cc5f427ad5a1d50cc6293b
SHA512 d873b283eee92041a78f27b26c5081a835c04ff768db6a4eac2b8f6d2b9b3f1ff5976fea0de66d8503f7fa26f1ab5aa733d0979307d8ad09553e999ef1bf9f91
SSDEEP 1536:NBuE6ZQEUF05vRmK6jvJt8skOIcWqQ71QliomJlIK:mE6WEUyAK69tigQ5KiomJlIK
TLSH
T15073D081B8E88456C8C2863151B7AF617B367C724A78E3E32BD1699E3D314C51E3379B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

53263

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar LoadLibraryA GetProcAddress HeapReAlloc VirtualAlloc HeapAlloc CloseHandle GetACP GetCPInfo WriteFile RtlUnwind HeapFree VirtualFree HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings LockResource FindResourceA LoadResource GetCurrentProcessId QueryPerformanceCounter GetCurrentThreadId GetTickCount GetOEMCP GetSystemTimeAsFileTime WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA UnhandledExceptionFilter GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess TerminateProcess GetCurrentProcess GetStringTypeW

user32

PostQuitMessage EndDialog LoadAcceleratorsA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA LoadCursorA LoadIconA RegisterClassExA GetSystemMetrics CreateWindowExA ShowWindow UpdateWindow LoadStringA GetClientRect DefWindowProcA DestroyWindow DialogBoxParamW wsprintfA BeginPaint DrawTextA EndPaint

gdi32

Rectangle SetPixel TextOutA CreateBitmap

advapi32

RegCloseKey RegOpenKeyExA RegQueryValueExA

shell32

StrStrIA StrRChrA

ole32

CoInitialize

Sharing