jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4c3a3d18603d43b9a7a2b45b8c7def97

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4c3a3d18603d43b9a7a2b45b8c7def97
Size 53KB
Sample261014-db6xesvt4r
SHA256 5e3e284a62d904cdfee75a0420a2fe79ba38904ac202bf19ce20b597217dbbe4
MD5 4c3a3d18603d43b9a7a2b45b8c7def97
SHA1 10c206839889ccef537ad03701b560561af59ec9
SHA512 bdae82812b9d86892099f65961b184e66c823551262c75a0215bcabbaba30d3842a588bb43be4b46bb1a199d8d7fcd290409e4730e039eef8f3f98af8502d07d
SSDEEP 1536:PO0+o9EJFgvFPLPy0dTdJ9KRJzZYcrEWPb0:POU2JFMd9KRJzZYePb0
TLSH
T13D33E1E112CB14EDE142273D4573C3AFAD792C9CD354139793E09A1F38F17189B68A9A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4c3a3d18603d43b9a7a2b45b8c7def97

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4c3a3d18603d43b9a7a2b45b8c7def97

.dll 53KB

jaffacakes118_HEUR.Trojan.Win32.Generic.4c3a3d18603d43b9a7a2b45b8c7def97

IMPHASH ca1a1223daf7b7f594c11d6e1ab2e933
SHA256 5e3e284a62d904cdfee75a0420a2fe79ba38904ac202bf19ce20b597217dbbe4
MD5 4c3a3d18603d43b9a7a2b45b8c7def97
SHA1 10c206839889ccef537ad03701b560561af59ec9
SHA512 bdae82812b9d86892099f65961b184e66c823551262c75a0215bcabbaba30d3842a588bb43be4b46bb1a199d8d7fcd290409e4730e039eef8f3f98af8502d07d
SSDEEP 1536:PO0+o9EJFgvFPLPy0dTdJ9KRJzZYcrEWPb0:POU2JFMd9KRJzZYePb0
TLSH
T13D33E1E112CB14EDE142273D4573C3AFAD792C9CD354139793E09A1F38F17189B68A9A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5095

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

GetDlgItem GetWindowThreadProcessId CallNextHookEx GetMenuItemID CreateIconFromResource BringWindowToTop DeleteMenu ShowWindow GetWindowRect GetDC UpdateWindow ScreenToClient EnableMenuItem GetActiveWindow DestroyIcon ClientToScreen

btparivs

ImmLockIMCC ILAppendID ImmRegisterWordA ImmSystemHandler DllCanUnloadNow SdbGetBinaryTagData SdbQueryData SdbTagIDToTagRef SdbCreateMsiTransformFile DAD_DragEnterEx2 OpenAs_RunDLLA DllUnregisterServer PathMakeUniqueName ImmDestroyContext DllInstall ILCreateFromPath ImmEscapeA ExtractIconExA ExtractIconA Options_RunDLL DAD_AutoScroll DragQueryFileA ILSaveToStream ImmDestroyIMCC ImmEnumInputContext ImmTranslateMessage SdbGetNextChild ImmSetCompositionStringA PathIsSlowA ImmCreateSoftKeyboard ImmIMPSetIMEA ImmRegisterClient SdbGetDatabaseMatch DllGetVersion PickIconDlg SdbGetTagDataSize ILFree SdbFreeFlagInfo CallCPLEntry16 DAD_DragEnterEx SdbOpenDatabase ImmReSizeIMCC FindExeDlgProc PifMgr_OpenProperties

kernel32

VirtualQueryEx LocalAlloc GetCurrentProcess LockFile LocalFree GetTapeStatus GetExitCodeThread WaitForMultipleObjects InitializeCriticalSection MapViewOfFile EnterCriticalSection UnmapViewOfFile MultiByteToWideChar BackupRead GlobalAlloc GetModuleHandleA LoadLibraryA BackupSeek CreateFileMappingA

advapi32

RegCloseKey AddAccessAllowedAce OpenThreadToken

ntdll

NtSetQuotaInformationFile