jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4151114aa6907dd38e0dce55fb1570ee

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4151114aa6907dd38e0dce55fb1570ee
Size 139KB
Sample261014-csmpfat13j
SHA256 b74c1643c40817f7521e76482dd28fda9a789015f31a60af01522633e3b2a55b
MD5 4151114aa6907dd38e0dce55fb1570ee
SHA1 a1d5b2396ead247ebd0dd0140275aca03f12a3df
SHA512 57af95c423101a10e7c69473a86fa1e4cab3a72be8e7c809a68a6db12256f81539620ed7a0ce6dc652dffc85fb49c6c2cfcab4d69624402ada2bfd6af1bcc514
SSDEEP 1536:Z7YoN7untbIBfWgLrL0WoRqn55aQf4U8Sz4RaTgiuc5o5/ezo43WhBn:ZXK2BfOWoq55BoM4RaTBucSmo9n
TLSH
T182D36C0067FA6E6AF8F36E341D75ADA58B3ABD51BA35674C248035170A728904E3DF33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4151114aa6907dd38e0dce55fb1570ee

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4151114aa6907dd38e0dce55fb1570ee

.exe 139KB

jaffacakes118_HEUR.Trojan.Win32.Generic.4151114aa6907dd38e0dce55fb1570ee

IMPHASH 56d9306f348d671571ce715d77ff6541
SHA256 b74c1643c40817f7521e76482dd28fda9a789015f31a60af01522633e3b2a55b
MD5 4151114aa6907dd38e0dce55fb1570ee
SHA1 a1d5b2396ead247ebd0dd0140275aca03f12a3df
SHA512 57af95c423101a10e7c69473a86fa1e4cab3a72be8e7c809a68a6db12256f81539620ed7a0ce6dc652dffc85fb49c6c2cfcab4d69624402ada2bfd6af1bcc514
SSDEEP 1536:Z7YoN7untbIBfWgLrL0WoRqn55aQf4U8Sz4RaTgiuc5o5/ezo43WhBn:ZXK2BfOWoq55BoM4RaTBucSmo9n
TLSH
T182D36C0067FA6E6AF8F36E341D75ADA58B3ABD51BA35674C248035170A728904E3DF33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

65700

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

WideCharToMultiByte VirtualProtect WritePrivateProfileStringA GetDiskFreeSpaceA GetModuleHandleA GetStartupInfoA VirtualQuery GetVersion SetLastError GetEnvironmentStringsW

msvcrt

_acmdln _close __set_app_type _except_handler3 log fread _strlwr _initterm memcmp _ftol exit _XcptFilter memchr towupper __mb_cur_max __p__fmode __p__commode __getmainargs __p__environ __setusermatherr _adjust_fdiv

user32

GetCursorPos WindowFromPoint GetTopWindow CharLowerA GetDlgItem SetCursor IsRectEmpty SetWindowLongA RegisterWindowMessageA SetWindowsHookExA

oleaut32

SysStringLen SetErrorInfo GetErrorInfo SysReAllocStringLen SafeArrayUnaccessData

comctl32

ImageList_BeginDrag ImageList_DrawEx ImageList_Create InitCommonControls CreatePropertySheetPageW ImageList_ReplaceIcon PropertySheetA ImageList_GetIcon

ole32

CLSIDFromProgID StgOpenStorageOnILockBytes RevokeDragDrop ReleaseStgMedium CoGetInterfaceAndReleaseStream CoDisconnectObject OleIsCurrentClipboard

shell32

ExtractIconExA SHAddToRecentDocs SHChangeNotify DragQueryFile SHGetSpecialFolderPathA SHCreateDirectoryExA DragQueryFileA DragAcceptFiles ExtractIconA

gdi32

ExtCreateRegion StretchBlt GetTextMetricsA ExtEscape SetBrushOrgEx CreateBrushIndirect

version

VerQueryValueW VerInstallFileA VerInstallFileW

advapi32

RegQueryInfoKeyW EqualSid RegEnumKeyW RegCloseKey RegEnumKeyExA OpenServiceW CryptDestroyHash GetSecurityDescriptorDacl CryptHashData