jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]41a557656a44e52371192e956c1d51c3

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.41a557656a44e52371192e956c1d51c3
Size 232KB
Sample261014-cszc8st13p
SHA256 9717cdaf15165a33aafb739d65a268a547819ded147c0f931d17db89b907b724
MD5 41a557656a44e52371192e956c1d51c3
SHA1 fd6d50f1d82c57e41cea8d04297941b5a7201f8c
SHA512 c0d9a880f15c32fb0bd2cb65b05f7820c86ced51f76786de4f2c74f353e2fb1be4d117e467fb9fc5dfe8ffdce46ad01af98a4f8c70df7e986bb1d9cbde2e60f4
SSDEEP 3072:pjQ9EcNcVGoyLN01zp0KeZqhnxWuY+wDw+dSWgK+j+vAglRGoQakRF3f+CvX0f1r:NSNUT0ZZ+xWoiSWt+eGoMFaSjyN16
TLSH
T10734BE5AEAF5C667C26502306DAF0B012E267E7B34385A1617B0FD3D7CF5B81A432726
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.41a557656a44e52371192e956c1d51c3

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.41a557656a44e52371192e956c1d51c3

.dll 232KB

jaffacakes118_HEUR.Trojan.Win32.Generic.41a557656a44e52371192e956c1d51c3

IMPHASH 886e208b1c27c63a3536abc86b3842a5
SHA256 9717cdaf15165a33aafb739d65a268a547819ded147c0f931d17db89b907b724
MD5 41a557656a44e52371192e956c1d51c3
SHA1 fd6d50f1d82c57e41cea8d04297941b5a7201f8c
SHA512 c0d9a880f15c32fb0bd2cb65b05f7820c86ced51f76786de4f2c74f353e2fb1be4d117e467fb9fc5dfe8ffdce46ad01af98a4f8c70df7e986bb1d9cbde2e60f4
SSDEEP 3072:pjQ9EcNcVGoyLN01zp0KeZqhnxWuY+wDw+dSWgK+j+vAglRGoQakRF3f+CvX0f1r:NSNUT0ZZ+xWoiSWt+eGoMFaSjyN16
TLSH
T10734BE5AEAF5C667C26502306DAF0B012E267E7B34385A1617B0FD3D7CF5B81A432726
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

28611

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ole32

StgCreatePropStg CoTaskMemFree CoInitializeEx CoGetCallContext CLSIDFromString

oleaut32

VariantInit VarUI2FromUI4 VarI4FromI1 VarCyFromI2 VarBstrFromCy SysAllocString

advapi32

RegOpenKeyExA RegCloseKey DeregisterEventSource RegQueryValueExA

kernel32

VirtualAlloc VerifyVersionInfoW UnhandledExceptionFilter VirtualProtect Sleep SetUnhandledExceptionFilter SetStdHandle SetLastError WaitForSingleObject WideCharToMultiByte WriteFile TerminateProcess GetProcAddress CloseHandle CreateFileW CreateSemaphoreA DebugBreak DeleteCriticalSection DeleteTimerQueueTimer DisableThreadLibraryCalls EnterCriticalSection ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FlushFileBuffers FormatMessageA FormatMessageW GetACP GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetEnvironmentVariableW GetFileSize GetLastError GetLocalTime GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOEMCP GetProcessHeap GetProcessPriorityBoost GetStartupInfoA GetStdHandle GetSystemTimeAsFileTime GetTickCount GetVersion GlobalAlloc GlobalFree HeapAlloc HeapCreate HeapDestroy HeapFree HeapLock HeapReAlloc HeapUnlock HeapWalk InitializeCriticalSection InitializeCriticalSectionAndSpinCount InterlockedCompareExchange InterlockedDecrement InterlockedExchange InterlockedExchangeAdd InterlockedIncrement LeaveCriticalSection LoadLibraryA LocalAlloc LocalFree LocalReAlloc MultiByteToWideChar QueryPerformanceCounter ReleaseSemaphore RtlUnwind

Sharing