jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4b172c0174780bf4a05210af97afc10d

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4b172c0174780bf4a05210af97afc10d
Size 304KB
Sample261014-c9bcqsfs9j
SHA256 b970b7c161baa7bf22f205ae6523ab0cc4c243087d6e7b709b69d8e9489f664a
MD5 4b172c0174780bf4a05210af97afc10d
SHA1 675f9d6a7629bd67c145fb7d4822d63581dffa7f
SHA512 2a21871f970edf6bc0a8e135f1f7aa0db4f44e96a22c828df0d02510566bf1fdeec9e5bac1cf7b593f4e732d6f6f2cc46edd44061be565859f795c36b960a36a
SSDEEP 6144:w8hg7V2//I/LOpqLV5HxY3R5n62+kxiO/bE:wCkVg/I68V5HxY3b6V+iO
TLSH
T1BA645A02F2A08935D39307768D93D7556AB6BD745E71828FE2603F2DDE342C7A62231D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4b172c0174780bf4a05210af97afc10d

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4b172c0174780bf4a05210af97afc10d

.exe 304KB

jaffacakes118_HEUR.Trojan.Win32.Generic.4b172c0174780bf4a05210af97afc10d

IMPHASH 831a622cfb10ef9e269d53066cfe4761
SHA256 b970b7c161baa7bf22f205ae6523ab0cc4c243087d6e7b709b69d8e9489f664a
MD5 4b172c0174780bf4a05210af97afc10d
SHA1 675f9d6a7629bd67c145fb7d4822d63581dffa7f
SHA512 2a21871f970edf6bc0a8e135f1f7aa0db4f44e96a22c828df0d02510566bf1fdeec9e5bac1cf7b593f4e732d6f6f2cc46edd44061be565859f795c36b960a36a
SSDEEP 6144:w8hg7V2//I/LOpqLV5HxY3R5n62+kxiO/bE:wCkVg/I68V5HxY3b6V+iO
TLSH
T1BA645A02F2A08935D39307768D93D7556AB6BD745E71828FE2603F2DDE342C7A62231D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

99222

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\JinZQ\Hook开机启动\sttray-setup\Release\sttray.pdb

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

wininet

InternetReadFile InternetOpenUrlA InternetCloseHandle InternetOpenA InternetGetConnectedState HttpQueryInfoA

winmm

timeGetTime

kernel32

GetFileSize DuplicateHandle GetCurrentProcess FindClose FindFirstFileA GetVolumeInformationA GetFullPathNameA SetErrorMode FileTimeToLocalFileTime GetFileAttributesA GetFileTime ExitProcess RtlUnwind HeapAlloc HeapFree VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery SetEndOfFile GetStartupInfoA GetCommandLineA HeapReAlloc HeapSize QueryPerformanceCounter GetCurrentProcessId HeapDestroy HeapCreate VirtualFree IsBadWritePtr GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetTimeZoneInformation SetStdHandle IsBadReadPtr IsBadCodePtr SetEnvironmentVariableA UnlockFile LockFile FlushFileBuffers RaiseException GetOEMCP GetCPInfo InterlockedIncrement GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc FileTimeToSystemTime InterlockedDecrement GetCurrentThread lstrcmpA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA SetLastError GlobalFree MulDiv GlobalAlloc GlobalLock GlobalUnlock FormatMessageA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcatA lstrcmpW lstrcpynA GetModuleHandleA LocalFree CreateThread LoadLibraryA GetProcAddress FreeLibrary CreateMutexA GetPrivateProfileStringA OpenProcess GetPriorityClass TerminateProcess CreateToolhelp32Snapshot Process32First Process32Next FindResourceA LoadResource LockResource SizeofResource WritePrivateProfileStringA GetModuleFileNameA CopyFileA CreateProcessA CompareStringW CompareStringA lstrcmpiA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange WriteFile CreateFileA ReadFile SetFilePointer CloseHandle BeginUpdateResourceA UpdateResourceA EndUpdateResourceA CreateDirectoryA GetTickCount Sleep MoveFileExA lstrlenA DeleteFileA GetSystemTimeAsFileTime

user32

RegisterClipboardFormatA PostThreadMessageA ReleaseCapture SetCapture CharNextA LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu SetWindowContextHelpId MapDialogRect wsprintfA GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetMessageA TranslateMessage GetActiveWindow GetCursorPos ValidateRect SetCursor PostQuitMessage SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA GetFocus IsWindow SetFocus IsChild GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints MessageBoxA GetKeyState SetForegroundWindow IsWindowVisible GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx GetParent EqualRect GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA MessageBeep GetNextDlgGroupItem InvalidateRgn GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect CopyRect PtInRect GetWindow GetSystemMetrics InvalidateRect CopyAcceleratorTableA SetRect IsRectEmpty LoadIconA GetClientRect IsIconic GetSystemMenu SendMessageA AppendMenuA DrawIcon CharUpperA GetIconInfo EnableWindow SendDlgItemMessageA UpdateWindow SetDlgItemTextA RemovePropA

gdi32

ExtSelectClipRgn GetStockObject PtVisible GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode GetWindowExtEx GetViewportExtEx ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA GetDeviceCaps CreateBitmap SetBkColor SetTextColor GetClipBox DeleteObject CreateCompatibleDC GetDIBits DeleteDC GetObjectA SetMapMode RestoreDC SaveDC ExtTextOutA RectVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegEnumValueA RegOpenKeyExA RegOpenKeyA RegQueryValueExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

shell32

SHGetSpecialFolderPathA ShellExecuteA ExtractIconA

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoGetClassObject CoTaskMemFree CoTaskMemAlloc CLSIDFromProgID CLSIDFromString CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes

oleaut32

VariantClear SafeArrayDestroy VariantCopy SysAllocStringByteLen SysStringLen SysAllocStringLen SysFreeString VariantInit VariantChangeType SysAllocString SystemTimeToVariantTime OleCreateFontIndirect