jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]44392f4a9e518765fd372daf2d8de9b8

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.44392f4a9e518765fd372daf2d8de9b8
Size 95KB
Sample261014-cw7tsaeb66
SHA256 ad4c12564d18de9779f25f98c774993647c0887a8b7860ea037ad49dd82e8cec
MD5 44392f4a9e518765fd372daf2d8de9b8
SHA1 f2535ae778b36d85ce634baff5d8ccb77597cc60
SHA512 f5b536ce5191b33214f6723f16e1d9b49d35819cc94d170535631539a27f48069a1507683f1466285351117758d2822180659877587cd68f0a23c83bea377e26
SSDEEP 1536:IrUyDuCQ6WBPC6eommfASwwb5RUUgSuF1QtO2f9uv4WILYE1ceDa7M6ElKcWmFIu:ojDnQjBPleo9fXwwb5RUUgx1s/WGcPMb
TLSH
T115A3BF27F5137573FD7D1BB420EFFABE8762A04354024946DF881A396AA2620F07935B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.44392f4a9e518765fd372daf2d8de9b8

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.44392f4a9e518765fd372daf2d8de9b8

.exe 95KB

jaffacakes118_HEUR.Trojan.Win32.Generic.44392f4a9e518765fd372daf2d8de9b8

IMPHASH 41ded5ed01d2f5d7b77800bf6a2e3edb
SHA256 ad4c12564d18de9779f25f98c774993647c0887a8b7860ea037ad49dd82e8cec
MD5 44392f4a9e518765fd372daf2d8de9b8
SHA1 f2535ae778b36d85ce634baff5d8ccb77597cc60
SHA512 f5b536ce5191b33214f6723f16e1d9b49d35819cc94d170535631539a27f48069a1507683f1466285351117758d2822180659877587cd68f0a23c83bea377e26
SSDEEP 1536:IrUyDuCQ6WBPC6eommfASwwb5RUUgSuF1QtO2f9uv4WILYE1ceDa7M6ElKcWmFIu:ojDnQjBPleo9fXwwb5RUUgx1s/WGcPMb
TLSH
T115A3BF27F5137573FD7D1BB420EFFABE8762A04354024946DF881A396AA2620F07935B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4368

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

30KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ss

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.test2

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

jaffacakes118_HEUR.Trojan.Win32.Generic.44392f4a9e518765fd372daf2d8de9b8

advapi32

kernel32

msvcrt

user32

generic