jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]3c2e63d56a649fb8b20095448cf3a22e

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.3c2e63d56a649fb8b20095448cf3a22e
Size 508KB
Sample261014-cdh3psty8m
SHA256 5f8dd873b62d1776a4570e3eb1004f3692b309ccc78c61abbceef7e5d898f0a4
MD5 3c2e63d56a649fb8b20095448cf3a22e
SHA1 0941e48e63899661f4c189d03a1794194324b995
SHA512 94330c6b30111b5661769c088dcd6fd3e998e6aa04c8c9a569497cea8b8478fd4d9066dd52fede24c5e0c6d3c98dd4f3a0b038004f4a55d92eed954d516e49e8
SSDEEP 12288:XLL6iub80MMnMMMMMRgPurDGSweuxkQFwACc6KqDmLHI2WM7rDAi3/4KKQkR:XLL6lbrMMnMMMMMQuj4tC+qDeH9DGzQ
TLSH
T106B42257F4903DD8C9CE063B98039399CEAB5B65C635ABA20E54FF1F7FB21A14394A10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.3c2e63d56a649fb8b20095448cf3a22e

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.3c2e63d56a649fb8b20095448cf3a22e

.exe 508KB

jaffacakes118_HEUR.Trojan.Win32.Generic.3c2e63d56a649fb8b20095448cf3a22e

IMPHASH 8007fd396c27abe931f8d24e6fe119f0
SHA256 5f8dd873b62d1776a4570e3eb1004f3692b309ccc78c61abbceef7e5d898f0a4
MD5 3c2e63d56a649fb8b20095448cf3a22e
SHA1 0941e48e63899661f4c189d03a1794194324b995
SHA512 94330c6b30111b5661769c088dcd6fd3e998e6aa04c8c9a569497cea8b8478fd4d9066dd52fede24c5e0c6d3c98dd4f3a0b038004f4a55d92eed954d516e49e8
SSDEEP 12288:XLL6iub80MMnMMMMMRgPurDGSweuxkQFwACc6KqDmLHI2WM7rDAi3/4KKQkR:XLL6lbrMMnMMMMMQuj4tC+qDeH9DGzQ
TLSH
T106B42257F4903DD8C9CE063B98039399CEAB5B65C635ABA20E54FF1F7FB21A14394A10
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

samlib

SamConnect SamConnectWithCreds

user32

DrawMenuBar GetMenuItemID ToAscii PostThreadMessageA GetWindow SetWindowLongA SetKeyboardState CharLowerA GetDCEx DrawIcon SetScrollPos DdeUninitialize PeekMessageA GetWindowThreadProcessId SetCursor GetDoubleClickTime SetWindowsHookExA DdeCreateDataHandle FindWindowA GetForegroundWindow SetMenuDefaultItem DestroyMenu GetScrollInfo BeginPaint DefMDIChildProcA IsRectEmpty IsWindowVisible GetAsyncKeyState EnableWindow GetClipboardFormatNameA SetParent GetMenuItemInfoA InvalidateRect GetDesktopWindow CreateWindowExA DeferWindowPos DdeQueryConvInfo CharLowerBuffW GetSystemMenu CloseClipboard DdeInitializeA CallWindowProcA GetMenuStringA OpenClipboard InsertMenuA GetUpdateRgn DdeQueryStringA ReleaseDC SubtractRect BringWindowToTop DestroyAcceleratorTable WinHelpA DefFrameProcA TranslateMDISysAccel CreateCursor CreateAcceleratorTableA TrackPopupMenu CreateMenu DrawTextA DeleteMenu SetCursorPos CharNextA GetKeyboardLayout MessageBeep SetWindowTextA CreateDialogParamA ShowCaret EnumThreadWindows wsprintfA DdeCmpStringHandles ScreenToClient DdeFreeStringHandle GetDlgItem ShowCursor KillTimer CreateCaret GetCaretPos IsWindowEnabled GetMenuState DrawFocusRect DefWindowProcA RegisterClassExA SendDlgItemMessageA SetActiveWindow FrameRect PostMessageW DialogBoxParamA DestroyWindow GetClientRect SetForegroundWindow DestroyCaret GetSubMenu LoadCursorA GetKeyState LoadIconA GetMenu IsZoomed PtInRect GetQueueStatus MsgWaitForMultipleObjects GetClassNameA GetMessageTime LoadStringA GetSystemMetrics SetDlgItemTextA GetKeyboardState GetCursor DdeGetLastError ModifyMenuA GetUpdateRect DdeAbandonTransaction TabbedTextOutA SetWindowsHookExW HideCaret EqualRect PostMessageA GetWindowTextA SetCapture ReleaseCapture CreatePopupMenu OffsetRect FillRect GetFocus SendMessageA CharPrevA DdeConnect MessageBoxA IsDialogMessageA SystemParametersInfoA SetScrollInfo LockWindowUpdate InflateRect GetClipboardData SetRect RemoveMenu GetPropA GetWindowRgn SetFocus GetCaretBlinkTime SetCaretPos EnableMenuItem SetScrollRange GetMenuItemCount LoadBitmapA VkKeyScanA AdjustWindowRect AttachThreadInput CharUpperBuffW RegisterClipboardFormatA GetDC GetCapture DdeDisconnect EndDialog AppendMenuA ClipCursor TranslateMessage CallNextHookEx MapWindowPoints EndDeferWindowPos DdeCreateStringHandleA CharLowerBuffA GetClassInfoExA BeginDeferWindowPos DestroyIcon IsIconic GetLastActivePopup RemovePropA ClientToScreen DdeClientTransaction GetWindowTextLengthA CopyRect WaitMessage GetClassInfoA IsClipboardFormatAvailable DdeSetUserHandle ShowWindow CharUpperA IsWindow keybd_event IntersectRect UnhookWindowsHookEx SetWindowRgn AdjustWindowRectEx SetPropA SetWindowPos PostQuitMessage DdeFreeDataHandle SetMenu SetWindowContextHelpId CopyAcceleratorTableA EmptyClipboard GetTabbedTextExtentA CharToOemA DispatchMessageA IsCharAlphaA UnregisterClassA GetActiveWindow RegisterClassA MoveWindow WaitForInputIdle GetSysColor MessageBoxIndirectA ShowScrollBar InvalidateRgn GetScrollPos DdeGetData OemToCharA CharToOemBuffA SetClipboardData SetMenuItemInfoA CreateIcon WindowFromPoint VkKeyScanW EnumClipboardFormats SetTimer FindWindowW CheckMenuItem GetWindowDC CharUpperBuffA DdePostAdvise GetIconInfo LoadImageA GetWindowLongA PeekMessageW LoadAcceleratorsA GetParent GetWindowRect DrawFrameControl GetMessagePos UpdateWindow DdeNameService DestroyCursor GetCursorPos EndPaint IsChild

kernel32

LoadLibraryA HeapSize SystemTimeToFileTime GetUserDefaultLCID GlobalUnlock FindClose FreeResource UnlockFile WideCharToMultiByte GetSystemDirectoryA GlobalReAlloc FreeLibrary LockResource GetModuleFileNameW LoadLibraryExA SetEvent GetExitCodeProcess GetTimeZoneInformation DuplicateHandle GlobalSize ReleaseSemaphore SizeofResource GetStringTypeA GetFileAttributesA RtlUnwind CloseHandle VirtualFree GlobalAlloc CreateFileA FlushFileBuffers VirtualProtect ExitProcess GetEnvironmentStrings SetLocalTime GetSystemInfo EnterCriticalSection SetFileTime GetStringTypeW _llseek ResetEvent GetCommandLineA DeleteCriticalSection SetFilePointer ReadFile DeleteFileA GetProcAddress GetSystemTime LCMapStringW GetModuleFileNameA IsDBCSLeadByte HeapAlloc MoveFileA FormatMessageA _lclose SetEnvironmentVariableA CompareStringW FreeEnvironmentStringsA SetStdHandle lstrcpyA SetEndOfFile WriteFile _lread GetEnvironmentStringsW GetCurrentProcess InterlockedDecrement lstrcmpA FreeEnvironmentStringsW VirtualQuery InitializeCriticalSection GetOEMCP lstrlenA GetUserDefaultLangID CreateProcessW CreateEventA GetStringTypeExA CreateSemaphoreA GetDateFormatA GlobalAddAtomA SearchPathA GetDriveTypeA GetACP SetErrorMode GlobalLock TlsFree FindNextFileA WaitForSingleObject CreateProcessA GetTempFileNameA GetShortPathNameA GetVersion TlsAlloc SetCurrentDirectoryA GetFullPathNameA GetLocalTime SetFileAttributesA IsBadReadPtr HeapFree _lwrite ResumeThread FileTimeToLocalFileTime SetHandleCount LeaveCriticalSection FlushInstructionCache TlsSetValue HeapCreate MulDiv GetTempPathA HeapDestroy GetCurrentProcessId ExitThread SetLastError LoadResource GetSystemDefaultLangID InterlockedIncrement FormatMessageW GetStartupInfoA lstrcatA WinExec Sleep FindFirstFileA GetLocaleInfoA IsBadCodePtr RaiseException GetSystemDefaultLCID TlsGetValue GetProfileStringA MultiByteToWideChar GetStdHandle GetVersionExA TerminateProcess GetCPInfo GetModuleHandleA HeapReAlloc RemoveDirectoryA CreateDirectoryA FileTimeToSystemTime LCMapStringA GetFileType FindResourceA CreateThread GlobalHandle GetTickCount GetCurrentThreadId lstrcmpiA GetCurrentDirectoryA CompareStringA GetWindowsDirectoryA lstrcmpiW GetVolumeInformationA UnhandledExceptionFilter LockFile GlobalFree GetFileTime GetLastError lstrcpynA GlobalDeleteAtom VirtualAlloc

ddraw

DirectDrawEnumerateA

ole32

OleSave OleLoad

ws2_32

setsockopt WSAConnect

advapi32

RegOpenKeyW RegSetValueExA LookupPrivilegeValueA RegOpenKeyA RegOpenKeyExA RegDeleteKeyW OpenProcessToken SetSecurityDescriptorDacl RegQueryInfoKeyA RegDeleteValueW DeregisterEventSource RegEnumValueW ReportEventA RegEnumKeyA RegDeleteValueA RegQueryValueA RegCreateKeyW InitializeSecurityDescriptor RegDeleteKeyA RegisterEventSourceA RegCloseKey AdjustTokenPrivileges RegSetValueExW RegCreateKeyA RegEnumKeyW RegQueryValueExA RegEnumValueA RegQueryValueExW RegSetValueA