jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]3bb097fe4500ae230402176dc702d0b4

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.3bb097fe4500ae230402176dc702d0b4
Size 135KB
Sample261014-caxfxset2x
SHA256 51e66be5db73997c2c24819b51482b18c8626fd359728f4ab019d8c1d296fbeb
MD5 3bb097fe4500ae230402176dc702d0b4
SHA1 d60b0317aafb17a8f6dd56b2e68537017b03b127
SHA512 19d6e2c056cd4b85ac97957128e05e4c634e6b71375da28653d26ff2c630a2e11ea6980e6e40ca9204227cd7c6e1907a8c5b9582ee3274521afdd8f982d76e43
SSDEEP 3072:Zbf/yUF1RgzRNxn92D/gmdSm+4ciKDcPuMoACxKr:AUTmNNJ9MdSMoeqH0
TLSH
T130D38D2176F1AF0AF0F77E381A719A414B7BBEA1F97B564C189131531A332854A9CF23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.3bb097fe4500ae230402176dc702d0b4

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.3bb097fe4500ae230402176dc702d0b4

.exe 135KB

jaffacakes118_HEUR.Trojan.Win32.Generic.3bb097fe4500ae230402176dc702d0b4

IMPHASH 07b5c2d06e7a3ae9a599199f80b9c791
SHA256 51e66be5db73997c2c24819b51482b18c8626fd359728f4ab019d8c1d296fbeb
MD5 3bb097fe4500ae230402176dc702d0b4
SHA1 d60b0317aafb17a8f6dd56b2e68537017b03b127
SHA512 19d6e2c056cd4b85ac97957128e05e4c634e6b71375da28653d26ff2c630a2e11ea6980e6e40ca9204227cd7c6e1907a8c5b9582ee3274521afdd8f982d76e43
SSDEEP 3072:Zbf/yUF1RgzRNxn92D/gmdSm+4ciKDcPuMoACxKr:AUTmNNJ9MdSMoeqH0
TLSH
T130D38D2176F1AF0AF0F77E381A719A414B7BBEA1F97B564C189131531A332854A9CF23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

66204

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetStartupInfoA GetEnvironmentVariableA GetModuleHandleA GlobalUnlock ExpandEnvironmentStringsA LocalFree VirtualProtect GetLocaleInfoW

msvcrt

_acmdln __setusermatherr _vsnprintf _XcptFilter _initterm __set_app_type strrchr exit __p__fmode _adjust_fdiv strtok __p__commode _filelengthi64 _mktemp clearerr strerror swprintf calloc log _except_handler3 __getmainargs

user32

DrawIconEx SetCursor GetCapture DestroyCursor GetCursorPos

oleaut32

VariantCopyInd SysAllocStringLen SafeArrayPutElement SysStringByteLen GetErrorInfo SafeArrayGetElement LoadTypeLib SafeArrayPtrOfIndex SysFreeString

advapi32

RegOpenKeyW RegEnumValueW OpenSCManagerA CheckTokenMembership CopySid AdjustTokenPrivileges OpenThreadToken GetSecurityDescriptorDacl CryptAcquireContextA RegSetValueExA GetTokenInformation RegQueryValueExA RegEnumKeyA CryptGenRandom

version

GetFileVersionInfoA VerInstallFileA VerQueryValueW GetFileVersionInfoSizeW

shell32

SHBrowseForFolderA ExtractIconExW ExtractIconA SHBrowseForFolderW DragQueryFileW

gdi32

LineTo SetTextColor RemoveFontResourceA SetPolyFillMode EnumFontFamiliesExA EnumFontFamiliesW

comctl32

ImageList_Remove ImageList_EndDrag CreateStatusWindowA ImageList_Read ImageList_Add ImageList_SetOverlayImage CreatePropertySheetPageW

ole32

CoSetProxyBlanket OleSetClipboard CreateBindCtx StringFromCLSID ReleaseStgMedium CoInitialize DoDragDrop OleDraw