jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]410249ed203c8ebb564b4

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.410249ed203c8ebb564b4
Size 178KB
Sample261014-csapwat12p
SHA256 0094496323e890cce532362abfa7c701390ad4433b2bac188f0dd1d7c73c2097
MD5 7dfa3c43a94410249ed203c8ebb564b4
SHA1 c605957365acef316ea1421cdae14006986aea63
SHA512 39893914a091b388645c02d60803ae1b76aac2bb50e26bc8fb497dfb068cf211b7302875d1fee13f3e3f790307b69ba30bc8b6236e6a4ad59a72ba01f5d00d32
SSDEEP 3072:eXGBEYvMkvtrNJoVo1IQ1WqBOTV1OxChB8TEdCQl3C4QlsYbhcqski8j:e5YvM0rgV/QakbQllQlsAR
TLSH
T1EA04BF1175D0CA72D6B60E304975DAB65E2CFD300E349AAB53BD023A5FB81D0563AEB3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.410249ed203c8ebb564b4

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.410249ed203c8ebb564b4

.exe 178KB

jaffacakes118_HEUR.Trojan.Win32.Generic.410249ed203c8ebb564b4

IMPHASH 8e3909a65780298fd5fb2eaef86a2116
SHA256 0094496323e890cce532362abfa7c701390ad4433b2bac188f0dd1d7c73c2097
MD5 7dfa3c43a94410249ed203c8ebb564b4
SHA1 c605957365acef316ea1421cdae14006986aea63
SHA512 39893914a091b388645c02d60803ae1b76aac2bb50e26bc8fb497dfb068cf211b7302875d1fee13f3e3f790307b69ba30bc8b6236e6a4ad59a72ba01f5d00d32
SSDEEP 3072:eXGBEYvMkvtrNJoVo1IQ1WqBOTV1OxChB8TEdCQl3C4QlsYbhcqski8j:e5YvM0rgV/QakbQllQlsAR
TLSH
T1EA04BF1175D0CA72D6B60E304975DAB65E2CFD300E349AAB53BD023A5FB81D0563AEB3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8205

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess GetLastError GetHandleInformation EscapeCommFunction GetCommTimeouts GetMailslotInfo lstrcpyW LoadLibraryA GetModuleHandleA GetCurrentProcessId AddAtomW SetComputerNameExA GetCPInfo CreateFileW HeapReAlloc HeapSize FlushFileBuffers WriteConsoleW GetProcessWorkingSetSize SetProcessAffinityMask GetProcessAffinityMask VirtualProtect GetProcessShutdownParameters GlobalAlloc SetFilePointerEx GetProcessHeap QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess RaiseException RtlUnwind SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc GetFileType GetConsoleCP GetConsoleMode CloseHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetStringTypeW DecodePointer

user32

GetCaretPos GetScrollRange SetScrollRange LoadImageW

advapi32

GetSecurityDescriptorDacl GetSecurityDescriptorControl GetSecurityDescriptorLength OpenEventLogW LookupPrivilegeNameA

shell32

ord180 ShellExecuteW

Sharing