jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]3e0316b7131ad000daaa56c3b9fca9b0

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.3e0316b7131ad000daaa56c3b9fca9b0
Size 415KB
Sample261014-cjnkdaeb38
SHA256 45008c2f86e5e5f210d76ab81f2469102cba0e49e4ebd0dd41bc3e80f21d674d
MD5 3e0316b7131ad000daaa56c3b9fca9b0
SHA1 140b2e3db85074708c68a48d870f5403e42bd19a
SHA512 2745be4c9cb336c11da49e93c41068779401fddfb1cfa30ce4c063078df7758f205a86ec60638777245fd668853c90cbeb4eb2baf17949d15fc3da40e8ee97ad
SSDEEP 3072:dvqi/bJUPXW+LvECRODNxL1PWvyln+1h0ujyMJi5Bk/qaQqFBL5wWNI5:j/bqXdvE5zLAvEn+1DWNpva3v
TLSH
T12094A0172DC0F3E1D05DC0F249E5C2278569E8629F15D5C7AFF38A6B1A2C5F06A392CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.3e0316b7131ad000daaa56c3b9fca9b0

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.3e0316b7131ad000daaa56c3b9fca9b0

.exe 415KB

jaffacakes118_HEUR.Trojan.Win32.Generic.3e0316b7131ad000daaa56c3b9fca9b0

IMPHASH 763d696575daba91df0e6bb1eb75c757
SHA256 45008c2f86e5e5f210d76ab81f2469102cba0e49e4ebd0dd41bc3e80f21d674d
MD5 3e0316b7131ad000daaa56c3b9fca9b0
SHA1 140b2e3db85074708c68a48d870f5403e42bd19a
SHA512 2745be4c9cb336c11da49e93c41068779401fddfb1cfa30ce4c063078df7758f205a86ec60638777245fd668853c90cbeb4eb2baf17949d15fc3da40e8ee97ad
SSDEEP 3072:dvqi/bJUPXW+LvECRODNxL1PWvyln+1h0ujyMJi5Bk/qaQqFBL5wWNI5:j/bqXdvE5zLAvEn+1DWNpva3v
TLSH
T12094A0172DC0F3E1D05DC0F249E5C2278569E8629F15D5C7AFF38A6B1A2C5F06A392CA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

157070

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mmp\module\setup\atlexe\out.pdb

shell32

ShellExecuteA

ole32

CoInitialize

oleaut32

SysFreeString

kernel32

TerminateThread WaitForSingleObject CreateThread ExpandEnvironmentStringsA lstrlenA lstrcatA lstrcpyA GetFileAttributesExA GetLastError CreateMutexA WriteFile RemoveDirectoryA DeleteFileA CreateDirectoryA GetTempPathA GetCommandLineA GetModuleFileNameA Sleep GetLocalTime GetTickCount CloseHandle ReadFile GetTimeZoneInformation GetLocaleInfoW CompareStringA CompareStringW MoveFileA GetProcAddress GetProcessHeap SetEndOfFile LoadLibraryA InterlockedExchange FreeLibrary SetConsoleCtrlHandler IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle SetFilePointer RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetStartupInfoA HeapFree GetModuleHandleW SetEnvironmentVariableA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA MultiByteToWideChar LCMapStringW HeapAlloc HeapSize ExitProcess GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA VirtualAlloc HeapReAlloc

advapi32

RegQueryValueExA RegOpenKeyExA RegDeleteValueA RegCreateKeyExA RegSetValueExA RegCloseKey RegOpenKeyA

user32

wsprintfA

shlwapi

PathRemoveBlanksA PathFileExistsA PathIsDirectoryA PathGetArgsA PathFindFileNameA

ws2_32

send closesocket gethostbyname select connect recv __WSAFDIsSet htons socket WSAStartup ioctlsocket

netapi32

Netbios