jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]42daf952808b49f6ed5f99eb047d62ef

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.42daf952808b49f6ed5f99eb047d62ef
Size 48KB
Sample261014-cvyjqaxtd1
SHA256 0a4e299c1f9c031134f55313b7c110139c0e7930322401bee51fb6ce1e7bef23
MD5 42daf952808b49f6ed5f99eb047d62ef
SHA1 c24ee6f91625493e3e8875be98aa0eef0bc90bd1
SHA512 ec7c2cc7cdce7b4403f4f561c4a741f1742bb8c2220147dfccda59fc04a70328c7bd979c74065be69729abf2f58a7d5435aa557bb64ee132100c902e4e3a348e
SSDEEP 768:eYbZHvCt/7bXjrTgS4dXLD4V+819syetCymGr7Vzj:e6NOTqLD4L9shAymGp
TLSH
T1E0237D12B261C2B3CBE00734FA5A5A953BF6BC214D45581793A3BE4D3DF02B29E39302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.42daf952808b49f6ed5f99eb047d62ef

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.42daf952808b49f6ed5f99eb047d62ef

.dll 48KB

jaffacakes118_HEUR.Trojan.Win32.Generic.42daf952808b49f6ed5f99eb047d62ef

IMPHASH fc0800a68b817beece09ce3bf8137f14
SHA256 0a4e299c1f9c031134f55313b7c110139c0e7930322401bee51fb6ce1e7bef23
MD5 42daf952808b49f6ed5f99eb047d62ef
SHA1 c24ee6f91625493e3e8875be98aa0eef0bc90bd1
SHA512 ec7c2cc7cdce7b4403f4f561c4a741f1742bb8c2220147dfccda59fc04a70328c7bd979c74065be69729abf2f58a7d5435aa557bb64ee132100c902e4e3a348e
SSDEEP 768:eYbZHvCt/7bXjrTgS4dXLD4V+819syetCymGr7Vzj:e6NOTqLD4L9shAymGp
TLSH
T1E0237D12B261C2B3CBE00734FA5A5A953BF6BC214D45581793A3BE4D3DF02B29E39302
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28829

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetSystemInfo GetVersionExA HeapCreate HeapDestroy lstrlenW MultiByteToWideChar lstrlenA GetShortPathNameA GetModuleHandleA GetModuleFileNameA GetProcAddress LoadLibraryA CloseHandle GetLocalTime Sleep HeapAlloc WideCharToMultiByte Process32Next Process32First CreateToolhelp32Snapshot GetWindowsDirectoryA GetSystemDirectoryA GetLastError CreateEventA GetCurrentProcessId DeleteFileA GetCommandLineW InterlockedDecrement EnterCriticalSection InterlockedIncrement LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection DisableThreadLibraryCalls CreateThread WritePrivateProfileStringA

user32

SetWindowTextA SendMessageA RegisterClassExA GetMessageA TranslateMessage DispatchMessageA IsWindow CreateWindowExA ShowWindow FindWindowExA KillTimer SetTimer PostMessageA DefWindowProcA CallNextHookEx

advapi32

RegCloseKey RegSetValueExA RegCreateKeyExA RegOpenKeyExA RegQueryValueExA

shell32

CommandLineToArgvW

ole32

CoCreateInstance

oleaut32

SysAllocString VariantClear SysStringLen LoadRegTypeLi SysFreeString

msvcrt

rand _stricmp strchr fopen fwrite fclose strlen free _initterm malloc _adjust_fdiv _strlwr strrchr strstr strcmp strcpy memcmp memcpy memset ??2@YAPAXI@Z _purecall sprintf ??3@YAXPAX@Z _access strcat