jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]44cd4cada3fcd40271cd5cee522e96bd

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.44cd4cada3fcd40271cd5cee522e96bd
Size 324KB
Sample261014-cx4hrae16j
SHA256 5d7498c9e3911ded3e8573bae51e8fdcbb080059ed98b843eda4111d48e4d115
MD5 44cd4cada3fcd40271cd5cee522e96bd
SHA1 4308313f9e84c9f3a0d43e153b5365f2e39f24fa
SHA512 5b3a51836f964e49f2c39e69af5e6cba8f5b26c2f6207b7850908841e045450c7cd0f49a2b959eb05e23fb35e65197cdad7e9818f8d052343648493a47412e55
SSDEEP 6144:6Bn7o8iGouqyNHzcitGeIM4v9drrfgrEE0GXN8uDBD:6FwazcawMo9tTGbOID
TLSH
T1AF64E10263F00058FAE70A3469725715C87FFC701926D5CE97A870AEDC75AD1AE2AF23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.44cd4cada3fcd40271cd5cee522e96bd

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.44cd4cada3fcd40271cd5cee522e96bd

.exe 324KB

jaffacakes118_HEUR.Trojan.Win32.Generic.44cd4cada3fcd40271cd5cee522e96bd

IMPHASH 16bac603b9a844d30d4df5dfda931300
SHA256 5d7498c9e3911ded3e8573bae51e8fdcbb080059ed98b843eda4111d48e4d115
MD5 44cd4cada3fcd40271cd5cee522e96bd
SHA1 4308313f9e84c9f3a0d43e153b5365f2e39f24fa
SHA512 5b3a51836f964e49f2c39e69af5e6cba8f5b26c2f6207b7850908841e045450c7cd0f49a2b959eb05e23fb35e65197cdad7e9818f8d052343648493a47412e55
SSDEEP 6144:6Bn7o8iGouqyNHzcitGeIM4v9drrfgrEE0GXN8uDBD:6FwazcawMo9tTGbOID
TLSH
T1AF64E10263F00058FAE70A3469725715C87FFC701926D5CE97A870AEDC75AD1AE2AF23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20558

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegCreateKeyExW RegOpenKeyA RegOpenKeyExA RegOpenKeyExW RegOpenKeyW RegQueryValueExA RegQueryValueExW RegSetValueExW

user32

SetWindowTextW SetWindowLongW SetFocus SetDlgItemTextW SetCursor SendMessageW SendDlgItemMessageW ReleaseDC PostMessageW ShowWindow MoveWindow MessageBoxA LoadStringW LoadIconW LoadCursorW LoadBitmapW LoadAcceleratorsW IsWindowEnabled IsDlgButtonChecked UpdateWindow SystemParametersInfoW wsprintfA wsprintfW PeekMessageW GetWindowRect GetWindowLongW GetSystemMetrics GetParent GetDlgItemTextW GetDlgItem GetDesktopWindow GetDC GetClientRect EndDialog EnableWindow DrawTextW DrawIcon DialogBoxParamW DestroyWindow CheckRadioButton CharNextW

kernel32

lstrlenW lstrcpyW lstrcmpiW lstrcmpiA lstrcatW WriteFile WideCharToMultiByte WaitForSingleObject VerLanguageNameW UnhandledExceptionFilter TerminateThread TerminateProcess Sleep SetUnhandledExceptionFilter SetEvent SearchPathA ReadFile QueryPerformanceCounter OutputDebugStringW OpenEventW MultiByteToWideChar LocalFree LocalAlloc LoadLibraryW CloseHandle CompareStringA CreateEventW CreateFileA CreateFileW CreateMutexW CreateProcessW CreateThread DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection ExitThread FreeLibrary GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetEnvironmentVariableA GetExitCodeThread GetLastError GetModuleHandleA GetPrivateProfileIntW GetPrivateProfileStringA GetPrivateProfileStringW GetProcAddress GetSystemDefaultLCID GetSystemDefaultLangID GetSystemTimeAsFileTime GetTickCount GetVersionExA GetVersionExW GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalReAlloc GlobalUnlock InitializeCriticalSection InterlockedDecrement InterlockedIncrement LeaveCriticalSection LoadLibraryA

ole32

CoCreateInstance

oleaut32

SetErrorInfo LoadRegTypeLi SysAllocString

gdi32

SelectObject MoveToEx LineTo GetTextExtentPoint32W GetObjectW GetDeviceCaps DeleteObject CreatePen CreateFontIndirectW

comctl32

PropertySheetW ImageList_ReplaceIcon ImageList_GetImageCount ImageList_Create DestroyPropertySheetPage CreatePropertySheetPageW

shell32

ExtractIconW

wininet

InternetReadFile InternetSetStatusCallbackW HttpOpenRequestA HttpQueryInfoA HttpSendRequestA InternetCloseHandle InternetCombineUrlW InternetConnectA InternetErrorDlg InternetGetCookieA InternetOpenA InternetQueryOptionA

wsock32

ioctlsocket WSACleanup WSAGetLastError WSASetLastError WSAStartup gethostbyaddr gethostbyname gethostname