jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]3d2797b4640728a227551f3f3c515627

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.3d2797b4640728a227551f3f3c515627
Size 51KB
Sample261014-ce66xsty9n
SHA256 d51e8071890efb95590c140c24a431778a3d2ca2ece9cb6c191ad68554883afa
MD5 3d2797b4640728a227551f3f3c515627
SHA1 f7773404f6438b66daf784a42baa714e0801f1be
SHA512 e2330a6a92af632e8526bc1947d036f9ee2fdaf1591a1480e6e8c89eee2735a3b2cb1d43003e2379c16b4db98fde1798e741f7cdc3a7b9b164bea411df9a9de9
SSDEEP 768:m1CJMI1VFdP8nDeq12eqhGZM/oHSwPf+lhgkStSFBv6wrWbgRWnlYPiFO3X2nIHP:phLdeyS2e5M/oHSw3+xRCU8lY6IWIHe
TLSH
T1D733AE0B639494F2D497457096963E2E59BB1C302C2E6CB3EB50B68A3CF20E5E139F47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.3d2797b4640728a227551f3f3c515627

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.3d2797b4640728a227551f3f3c515627

.dll 51KB

jaffacakes118_HEUR.Trojan.Win32.Generic.3d2797b4640728a227551f3f3c515627

IMPHASH f943cd2fe92b0ba77a212a3017836383
SHA256 d51e8071890efb95590c140c24a431778a3d2ca2ece9cb6c191ad68554883afa
MD5 3d2797b4640728a227551f3f3c515627
SHA1 f7773404f6438b66daf784a42baa714e0801f1be
SHA512 e2330a6a92af632e8526bc1947d036f9ee2fdaf1591a1480e6e8c89eee2735a3b2cb1d43003e2379c16b4db98fde1798e741f7cdc3a7b9b164bea411df9a9de9
SSDEEP 768:m1CJMI1VFdP8nDeq12eqhGZM/oHSwPf+lhgkStSFBv6wrWbgRWnlYPiFO3X2nIHP:phLdeyS2e5M/oHSw3+xRCU8lY6IWIHe
TLSH
T1D733AE0B639494F2D497457096963E2E59BB1C302C2E6CB3EB50B68A3CF20E5E139F47
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2133669

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CreateFileA GetModuleFileNameA LoadLibraryA GetModuleHandleA WriteFile WideCharToMultiByte MultiByteToWideChar GetProcAddress FindClose FindFirstFileA OpenProcess GetTempPathA GetWindowsDirectoryA ReleaseMutex GetLastError CreateMutexA GetFileSize FindNextFileA Sleep DeleteFileA GetLocalTime ReadFile SetFilePointer IsBadReadPtr VirtualFree VirtualAlloc SetThreadPriority CreateThread CopyFileA GetTickCount SetFileTime GetFileTime GetPrivateProfileStringA ExitProcess TerminateProcess GetCurrentProcess WritePrivateProfileStringA DeviceIoControl lstrcmpiA SetUnhandledExceptionFilter Process32First Process32Next HeapAlloc GetProcessHeap VirtualProtect CreateToolhelp32Snapshot Thread32First GetCurrentProcessId OpenThread GetThreadContext SetThreadContext CloseHandle Thread32Next EnterCriticalSection LeaveCriticalSection InitializeCriticalSection AddVectoredExceptionHandler

user32

FindWindowA GetDesktopWindow GetWindowTextA GetClassNameA PostMessageA GetWindow wsprintfA

advapi32

RegEnumKeyExA RegOpenKeyExA RegQueryValueExA RegCloseKey OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges

msvcrt

strstr _strcmpi sscanf _vsnprintf rand srand strrchr _strlwr _strupr ??2@YAPAXI@Z ??3@YAXPAX@Z memset memcpy _except_handler3 strcat strlen _itoa _stricmp free malloc strchr sprintf strncpy isspace isalnum atoi strcpy

wsock32

socket WSAStartup shutdown htons send connect recv closesocket