jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]42c14d994f816ae125092e815c21e037

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.42c14d994f816ae125092e815c21e037
Size 792KB
Sample261014-cvdjjsxtdw
SHA256 3a4f3928cb460cb5f16c28a8ea19dcd6077712f0290e127d03894290f1123699
MD5 42c14d994f816ae125092e815c21e037
SHA1 1a599717f14c801a4ba3f2506c1a707a17331b1f
SHA512 6973f32c8437e1c12854457e1a30a7e37469c1e2576eb44f7ade12449b19bd8ceda0c266d6431d1c9ad8f08347f756cd93c1d571bbfc7c627a2c0ca70b771401
SSDEEP 12288:FHqvFng0SPTBvCst8NwPxjOrf18rFvefYdNwkJi0OfDuWe9yeekI:ZqvFgZljeyxKr98rFveoJI
TLSH
T181058F037962C4B5F50C0931157A7B7AAA799E434A35CFCBE7A0EEB92C31182D53721E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.42c14d994f816ae125092e815c21e037

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.42c14d994f816ae125092e815c21e037

.dll 792KB

jaffacakes118_HEUR.Trojan.Win32.Generic.42c14d994f816ae125092e815c21e037

IMPHASH d7352c5315031897b3f5a37b32da9c36
SHA256 3a4f3928cb460cb5f16c28a8ea19dcd6077712f0290e127d03894290f1123699
MD5 42c14d994f816ae125092e815c21e037
SHA1 1a599717f14c801a4ba3f2506c1a707a17331b1f
SHA512 6973f32c8437e1c12854457e1a30a7e37469c1e2576eb44f7ade12449b19bd8ceda0c266d6431d1c9ad8f08347f756cd93c1d571bbfc7c627a2c0ca70b771401
SSDEEP 12288:FHqvFng0SPTBvCst8NwPxjOrf18rFvefYdNwkJi0OfDuWe9yeekI:ZqvFgZljeyxKr98rFveoJI
TLSH
T181058F037962C4B5F50C0931157A7B7AAA799E434A35CFCBE7A0EEB92C31182D53721E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

433505

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

IsBadCodePtr IsBadReadPtr CompareStringW CompareStringA SetUnhandledExceptionFilter GetStringTypeW GetStringTypeA IsBadWritePtr VirtualAlloc LCMapStringW LCMapStringA GlobalAlloc VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetStartupInfoA GetFileType GetStdHandle SetHandleCount GetACP HeapSize TerminateProcess GetLocalTime GetSystemTime GetTimeZoneInformation RaiseException RtlUnwind GetOEMCP GetCPInfo GetProcessVersion SetErrorMode GlobalFlags GetCurrentThread Sleep CreateSemaphoreA ResumeThread ReleaseSemaphore EnterCriticalSection LeaveCriticalSection GetProfileStringA WriteFile ReadFile GetLastError WaitForMultipleObjects CreateFileA SetEvent FindResourceA LoadResource LockResource GetModuleFileNameA GetCurrentThreadId ExitProcess GlobalSize GlobalFree DeleteCriticalSection InitializeCriticalSection lstrcatA WinExec lstrcpyA FindNextFileA GlobalReAlloc HeapFree HeapReAlloc GetProcessHeap HeapAlloc GetFullPathNameA FreeLibrary LoadLibraryA lstrlenA GetVersionExA WritePrivateProfileStringA CreateThread CreateEventA SetStdHandle GetFileTime GetFileSize TlsGetValue LocalReAlloc TlsSetValue TlsFree GlobalHandle TlsAlloc LocalAlloc lstrcmpA GetVersion GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpiA SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer GetCurrentProcess DuplicateHandle lstrcpynA SetLastError GlobalLock GlobalUnlock FindFirstFileA FindClose GetFileAttributesA MoveFileA FileTimeToLocalFileTime FileTimeToSystemTime LocalFree MultiByteToWideChar WideCharToMultiByte InterlockedDecrement InterlockedIncrement SetCurrentDirectoryA GetVolumeInformationA GetModuleHandleA GetProcAddress MulDiv GetCommandLineA GetTickCount WaitForSingleObject SetEnvironmentVariableA CloseHandle

user32

OpenClipboard GetClipboardData CloseClipboard SetClipboardData EmptyClipboard wsprintfA GetSystemMetrics GetCursorPos MessageBoxA SetWindowPos SendMessageA DestroyCursor SetParent IsWindow PostMessageA GetTopWindow GetParent GetFocus GetClientRect InvalidateRect ValidateRect UpdateWindow EqualRect GetWindowRect SetForegroundWindow DestroyMenu IsChild ReleaseDC IsRectEmpty FillRect SystemParametersInfoA TranslateMessage LoadIconA DrawFrameControl DrawEdge DrawFocusRect WindowFromPoint GetMessageA DispatchMessageA SetRectEmpty RegisterClipboardFormatA CreateIconFromResourceEx CreateIconFromResource DrawIconEx CreatePopupMenu AppendMenuA ModifyMenuA CreateMenu CreateAcceleratorTableA GetDlgCtrlID GetSubMenu EnableMenuItem ClientToScreen EnumDisplaySettingsA LoadImageA ShowWindow IsWindowEnabled TranslateAcceleratorA GetKeyState CopyAcceleratorTableA PostQuitMessage IsZoomed GetSystemMenu DeleteMenu GetClassInfoA DefWindowProcA GetMenu SetMenu PeekMessageA IsIconic SetFocus GetActiveWindow GetWindow DestroyAcceleratorTable SetWindowRgn GetMessagePos ScreenToClient ChildWindowFromPointEx CopyRect LoadBitmapA WinHelpA KillTimer SetTimer ReleaseCapture GetWindowTextA GetWindowTextLengthA CharUpperA GetWindowDC BeginPaint EndPaint TabbedTextOutA DrawTextA GrayStringA GetDlgItem DestroyWindow CreateDialogIndirectParamA EndDialog GetNextDlgTabItem GetWindowPlacement RegisterWindowMessageA GetDC GetLastActivePopup GetMessageTime RemovePropA CallWindowProcA GetPropA UnhookWindowsHookEx SetPropA GetClassLongA CallNextHookEx SetWindowsHookExA CreateWindowExA GetMenuItemID GetMenuItemCount RegisterClassA GetScrollPos GetForegroundWindow AdjustWindowRectEx MapWindowPoints SendDlgItemMessageA ScrollWindowEx IsDialogMessageA SetWindowTextA MoveWindow CheckMenuItem SetMenuItemBitmaps GetMenuState GetMenuCheckMarkDimensions GetClassNameA GetDesktopWindow UnregisterClassA LoadStringA GetSysColorBrush GetCapture SetCapture GetScrollRange SetScrollRange SetScrollPos InflateRect SetRect IntersectRect DestroyIcon PtInRect OffsetRect IsWindowVisible EnableWindow RedrawWindow GetWindowLongA SetWindowLongA GetSysColor SetActiveWindow SetCursorPos LoadCursorA SetCursor

gdi32

CreateRectRgnIndirect SetStretchBltMode GetClipRgn CreatePolygonRgn SelectClipRgn DeleteObject CreateDIBitmap GetSystemPaletteEntries CreatePalette StretchBlt SelectPalette RealizePalette GetDIBits GetWindowExtEx GetViewportOrgEx GetWindowOrgEx BeginPath EndPath PathToRegion CreateEllipticRgn CreateRoundRectRgn GetTextColor GetBkMode GetBkColor GetROP2 GetStretchBltMode GetPolyFillMode CreateCompatibleBitmap CreateDCA CreateBitmap SelectObject GetObjectA CreatePen PatBlt FillRgn CreateRectRgn CombineRgn CreateSolidBrush GetStockObject CreateFontIndirectA EndPage EndDoc DeleteDC StartDocA StartPage BitBlt CreateCompatibleDC Ellipse Rectangle LPtoDP DPtoLP GetCurrentObject RoundRect GetTextExtentPoint32A GetDeviceCaps SetBkColor GetTextMetricsA Escape ExtTextOutA TextOutA RectVisible PtVisible GetViewportExtEx ExtSelectClipRgn LineTo MoveToEx ExcludeClipRect GetClipBox ScaleWindowExtEx SetWindowExtEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode SetTextColor SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC

winmm

waveOutReset midiStreamRestart midiStreamClose midiOutReset midiStreamStop midiStreamOut midiOutPrepareHeader midiStreamProperty midiStreamOpen midiOutUnprepareHeader waveOutOpen waveOutGetNumDevs waveOutClose waveOutUnprepareHeader waveOutPause waveOutWrite waveOutPrepareHeader

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegCreateKeyExA RegCloseKey RegOpenKeyExA RegSetValueExA RegQueryValueA

shell32

Shell_NotifyIconA ShellExecuteA

ole32

OleUninitialize CLSIDFromString OleInitialize

oleaut32

RegisterTypeLi LoadTypeLi UnRegisterTypeLi

comctl32

ImageList_Destroy ord17

ws2_32

ioctlsocket recv getpeername accept inet_ntoa WSACleanup closesocket WSAAsyncSelect recvfrom

comdlg32

GetFileTitleA GetSaveFileNameA GetOpenFileNameA ChooseColorA