jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]40c47d751d5ea28b17ac469ab0b27989

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.40c47d751d5ea28b17ac469ab0b27989
Size 324KB
Sample261014-cr1jxae12p
SHA256 423068d17d7e9b76b1b6ea854834764b1b5d87e1ecf9f72d05ec338d490a2261
MD5 40c47d751d5ea28b17ac469ab0b27989
SHA1 c3b2f258d33dac4230fb1d8a9319a338beddd4d7
SHA512 4f414f9f5c19b4c9441d19d4df58b731de4416f2b34dd65c312622244b10b67f43d9e7f4cf819c6a31032cac54a98a0fbd54af0c77d2164c9f6de6c06b6d7a45
SSDEEP 6144:yQL7j0zpEKREJxE4rEZUvBQGZlr90axDOG0aI400GXFmydHiyLQJge976s4HXN/:tuEKArZBPlRoNvR0M5Cae976s43FE3D
TLSH
T13164F112F79074F1D2ED0E3814A69B72CABEB9320024C193D79EE65DCD31790EE16762
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.40c47d751d5ea28b17ac469ab0b27989

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.40c47d751d5ea28b17ac469ab0b27989

.exe 324KB

jaffacakes118_HEUR.Trojan.Win32.Generic.40c47d751d5ea28b17ac469ab0b27989

IMPHASH 341e840e027b01535119e0a77d108731
SHA256 423068d17d7e9b76b1b6ea854834764b1b5d87e1ecf9f72d05ec338d490a2261
MD5 40c47d751d5ea28b17ac469ab0b27989
SHA1 c3b2f258d33dac4230fb1d8a9319a338beddd4d7
SHA512 4f414f9f5c19b4c9441d19d4df58b731de4416f2b34dd65c312622244b10b67f43d9e7f4cf819c6a31032cac54a98a0fbd54af0c77d2164c9f6de6c06b6d7a45
SSDEEP 6144:yQL7j0zpEKREJxE4rEZUvBQGZlr90axDOG0aI400GXFmydHiyLQJge976s4HXN/:tuEKArZBPlRoNvR0M5Cae976s43FE3D
TLSH
T13164F112F79074F1D2ED0E3814A69B72CABEB9320024C193D79EE65DCD31790EE16762
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23778

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalFree LockResource MapViewOfFile MoveFileExW MoveFileW MulDiv MultiByteToWideChar OpenFileMappingW OpenMutexW OpenProcess QueryDosDeviceW ReadFile ReleaseMutex ResetEvent SetCurrentDirectoryW SetEndOfFile SetErrorMode SetEvent SetFileAttributesW LocalAlloc SetLastError SetThreadPriority SizeofResource Sleep TerminateThread UnmapViewOfFile VirtualAlloc VirtualFree WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileSectionW WritePrivateProfileStringW lstrcmpA lstrcpynW lstrlenA lstrlenW LoadResource LoadLibraryW LoadLibraryA LeaveCriticalSection InterlockedIncrement InterlockedDecrement InitializeCriticalSection HeapAlloc GetWindowsDirectoryW CloseHandle GetVersionExW GetVersion GetTickCount GetTempPathW GetTempFileNameW GetSystemTimeAsFileTime GetSystemTime GetStartupInfoW GetShortPathNameW GetProcessHeap GetProcAddress GetPrivateProfileStringW GetPrivateProfileSectionW GetModuleHandleW GetModuleHandleA GetModuleFileNameW GetLogicalDrives GetLogicalDriveStringsW GetLocalTime GetLastError GetFullPathNameW GetFileSize GetFileAttributesW GetDriveTypeW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCurrentDirectoryW GetCommandLineW FreeLibrary FindResourceW FindNextFileW FindFirstFileW FindClose FileTimeToSystemTime EnterCriticalSection DuplicateHandle DeviceIoControl DeleteFileW DeleteCriticalSection CreateThread CreateMutexW CreateFileW CreateFileMappingW CreateFileA CreateEventW CreateDirectoryW CopyFileW SetFilePointer

user32

SetActiveWindow SendMessageW ScreenToClient ReleaseDC RegisterWindowMessageW PtInRect PostMessageW PeekMessageW MsgWaitForMultipleObjects MessageBoxW MessageBeep LoadStringW LoadMenuW LoadImageW LoadIconW KillTimer IsWindowEnabled IsWindow IsIconic SetCursor GetWindowRect GetWindowLongW GetWindow GetSystemMetrics GetSystemMenu GetSysColor GetSubMenu GetParent GetForegroundWindow GetFocus GetDC GetCursorPos GetClientRect GetClassNameW GetActiveWindow ExitWindowsEx EnumChildWindows EnableWindow EnableMenuItem SetForegroundWindow SetTimer TranslateMessage UpdateWindow InvalidateRect DrawIcon DrawFocusRect DispatchMessageW CopyRect AppendMenuW FillRect

gdi32

StretchBlt RealizePalette GetObjectW GetDeviceCaps CreateCompatibleDC CreateDIBitmap CreateFontIndirectW CreateHalftonePalette CreateICW CreatePalette DeleteDC DeleteObject GetDIBColorTable

advapi32

OpenSCManagerW RegOpenKeyExA RegOpenKeyA RegEnumValueW RegEnumKeyW SetThreadToken SetSecurityDescriptorDacl RevertToSelf RegSetValueExW RegSetValueExA RegQueryValueExW RegQueryValueExA RegQueryInfoKeyW AdjustTokenPrivileges AllocateAndInitializeSid CloseServiceHandle DeleteService DuplicateToken EqualSid FreeSid GetSecurityDescriptorDacl GetSidLengthRequired GetSidSubAuthority GetTokenInformation InitializeSecurityDescriptor InitializeSid LookupPrivilegeValueW OpenProcessToken RegEnumKeyExW OpenServiceW OpenThreadToken RegCloseKey RegCreateKeyExW RegDeleteKeyA RegDeleteKeyW RegDeleteValueA RegDeleteValueW RegEnumKeyExA RegOpenKeyExW

shell32

SHGetMalloc SHGetFileInfoW SHGetDesktopFolder SHBrowseForFolderW SHGetPathFromIDListW

comctl32

ImageList_DrawEx ImageList_GetImageCount ImageList_ReplaceIcon ImageList_Draw ImageList_SetOverlayImage