jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]3b90a3634256dc762601923c5586f3b4

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.3b90a3634256dc762601923c5586f3b4
Size 58KB
Sample261014-cahmrsty6m
SHA256 4ca75e5fc61fb99243bf3a591d390a25ad8c6269545c75d609c2f317d77a156f
MD5 3b90a3634256dc762601923c5586f3b4
SHA1 8c2774f51a224fb2f3c7144772d1e4ae7a74e28c
SHA512 530ab84bf738d0fb2704d66290cf78213757ddbdc53013ea622976c1eacef3e777185f88adf9d58556e9fcfb270b2891597775ba367d379ce3e68d7f36b17fcb
SSDEEP 1536:Gho2TblFqqVUEseO1pw1d5d0rgCM7d1tvN:GhoulFPqEseOTw1dMMHd19N
TLSH
T1AB436BCC8641A9D6F0E204B5D642467B2C95BFF12B321CD7A698AC59D2792C19B01FF3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.3b90a3634256dc762601923c5586f3b4

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.3b90a3634256dc762601923c5586f3b4

.dll 58KB

jaffacakes118_HEUR.Trojan.Win32.Generic.3b90a3634256dc762601923c5586f3b4

IMPHASH 32711f0310d75e3c52dd47b8b330edc8
SHA256 4ca75e5fc61fb99243bf3a591d390a25ad8c6269545c75d609c2f317d77a156f
MD5 3b90a3634256dc762601923c5586f3b4
SHA1 8c2774f51a224fb2f3c7144772d1e4ae7a74e28c
SHA512 530ab84bf738d0fb2704d66290cf78213757ddbdc53013ea622976c1eacef3e777185f88adf9d58556e9fcfb270b2891597775ba367d379ce3e68d7f36b17fcb
SSDEEP 1536:Gho2TblFqqVUEseO1pw1d5d0rgCM7d1tvN:GhoulFPqEseOTw1dMMHd19N
TLSH
T1AB436BCC8641A9D6F0E204B5D642467B2C95BFF12B321CD7A698AC59D2792C19B01FF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10774

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

o.pdb

kernel32

OpenFileMappingA OpenEventA WaitForSingleObject TerminateProcess SetEvent WaitForMultipleObjects CreateProcessA SetThreadLocale GetThreadLocale WideCharToMultiByte ExitProcess DeleteCriticalSection InitializeCriticalSection GetVersionExA LeaveCriticalSection EnterCriticalSection ReleaseMutex CreateEventA FormatMessageA OutputDebugStringA GetCurrentDirectoryA RemoveDirectoryA FindNextFileA MapViewOfFile CreateFileMappingA UnmapViewOfFile IsDBCSLeadByte lstrcpynA FindClose GetStartupInfoA GetModuleHandleA GetCurrentThread SetThreadPriority Sleep GetCurrentThreadId SuspendThread ResumeThread DeviceIoControl GetProcessHeap GetModuleFileNameA SetCurrentDirectoryA GetCommandLineA GetLastError GetSystemDirectoryA GetLogicalDrives GetDriveTypeA DeleteFileA CopyFileA MoveFileA WritePrivateProfileStringA WriteFile SetLastError GetEnvironmentVariableW SetEnvironmentVariableW SetCurrentDirectoryW GetWindowsDirectoryA GetPrivateProfileStringA SetFileAttributesA GetFileAttributesA CreateFileA ReadFile CloseHandle lstrlenA lstrcpyA RaiseException InterlockedExchange InterlockedIncrement CreateMutexA FindFirstFileA SetErrorMode SetFilePointer SetEnvironmentVariableA

user32

CharLowerW CharLowerA MessageBoxA wsprintfA GetWindowThreadProcessId GetWindowTextA EnumWindows GetKeyboardType

Sharing