jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]3bb4cc46caad2254b58f5

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.3bb4cc46caad2254b58f5
Size 211KB
Sample261014-cazahset2z
SHA256 ada30706d2cb71eba7300014d35cd32454847301e1a5f7c7e5eff8dde0011df0
MD5 d7cc3c9fd2a3bb4cc46caad2254b58f5
SHA1 239896aa0da39fb6739e4021379c2aff0c47bcca
SHA512 9ada7d42b50e36adf66fdca10cb20c40109d132c49fc5ede79c91c9f975dd3c0b87089458e386011a6b89b873eb31472f272e2cea157f135010eae203556d8dd
SSDEEP 3072:gZl0Owc6VyJLwIJ4e0AhZv0bPvRAqVdcQSWPsYFZeliouQKc0Zi4VlOvPsWfn43M:CHhHlrQPvWmjSWPsY6IofKcumv0WfAM
TLSH
T16E249E91E9D48434F4B12CB158E376F0A2BEA3325D23CF5B9B527DAD0A61CE04E29D17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.3bb4cc46caad2254b58f5

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.3bb4cc46caad2254b58f5

.exe 211KB

jaffacakes118_HEUR.Trojan.Win32.Generic.3bb4cc46caad2254b58f5

IMPHASH 40f813ce80b9162069200e279d9054a5
SHA256 ada30706d2cb71eba7300014d35cd32454847301e1a5f7c7e5eff8dde0011df0
MD5 d7cc3c9fd2a3bb4cc46caad2254b58f5
SHA1 239896aa0da39fb6739e4021379c2aff0c47bcca
SHA512 9ada7d42b50e36adf66fdca10cb20c40109d132c49fc5ede79c91c9f975dd3c0b87089458e386011a6b89b873eb31472f272e2cea157f135010eae203556d8dd
SSDEEP 3072:gZl0Owc6VyJLwIJ4e0AhZv0bPvRAqVdcQSWPsYFZeliouQKc0Zi4VlOvPsWfn43M:CHhHlrQPvWmjSWPsY6IofKcumv0WfAM
TLSH
T16E249E91E9D48434F4B12CB158E376F0A2BEA3325D23CF5B9B527DAD0A61CE04E29D17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4668

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalAlloc LoadLibraryW GetProcAddress ExitProcess GetCurrentProcessId GetModuleHandleW lstrcpyW SetComputerNameExA AddAtomW TerminateThread DecodePointer HeapReAlloc HeapSize WriteConsoleW DuplicateHandle GetLastError GetDriveTypeA GetProcessAffinityMask TerminateProcess GetHandleInformation SetProcessWorkingSetSize GetSystemTimeAdjustment SetFilePointerEx FlushFileBuffers CreateFileW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW GetACP HeapFree HeapAlloc LCMapStringW GetFileType CloseHandle GetConsoleCP GetConsoleMode GetStringTypeW FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap RaiseException

user32

ShowScrollBar PostMessageA DestroyIcon PeekMessageW EnableScrollBar

advapi32

LookupPrivilegeNameW GetSecurityDescriptorControl OpenEventLogW GetSecurityDescriptorLength GetSecurityDescriptorDacl

shell32

ShellExecuteW

Sharing