jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4c864316e010e7c891b9077b32f0ff48

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4c864316e010e7c891b9077b32f0ff48
Size 164KB
Sample261014-dc6caaex3x
SHA256 34feea1f45afd420921d8eb9fc0009463e709bab9d7039fcd33407acdde98cb5
MD5 4c864316e010e7c891b9077b32f0ff48
SHA1 f2bcaa565721a10179fa5eee1f8ba0bdb1d2540f
SHA512 f51f4fda66401444b54c6c55cb1b84548da77b4999b0b6306a6e968f0bd26a249a00d3a60adc337cfce3bd460b8b2e6e8f8e373608cecd67e1fa081ee60c1828
SSDEEP 1536:sJERKOWc1hBgkrd8fcrj6bmMqd5p9GYBvSlNrT0cM1tSo2clJF4rmv2luxKESGJX:2qrd1wQOPqB9G0HS7caJGJqnjrKX
TLSH
T1E1F3AD1DC5912A90FCA318350EEB36F29B6ADC3C06795E72D1C0D95F2CA99243F1DA8D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4c864316e010e7c891b9077b32f0ff48

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4c864316e010e7c891b9077b32f0ff48

.exe 164KB

jaffacakes118_HEUR.Trojan.Win32.Generic.4c864316e010e7c891b9077b32f0ff48

IMPHASH f092b38b5a006725b6af77d2572e5eb3
SHA256 34feea1f45afd420921d8eb9fc0009463e709bab9d7039fcd33407acdde98cb5
MD5 4c864316e010e7c891b9077b32f0ff48
SHA1 f2bcaa565721a10179fa5eee1f8ba0bdb1d2540f
SHA512 f51f4fda66401444b54c6c55cb1b84548da77b4999b0b6306a6e968f0bd26a249a00d3a60adc337cfce3bd460b8b2e6e8f8e373608cecd67e1fa081ee60c1828
SSDEEP 1536:sJERKOWc1hBgkrd8fcrj6bmMqd5p9GYBvSlNrT0cM1tSo2clJF4rmv2luxKESGJX:2qrd1wQOPqB9G0HS7caJGJqnjrKX
TLSH
T1E1F3AD1DC5912A90FCA318350EEB36F29B6ADC3C06795E72D1C0D95F2CA99243F1DA8D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19980

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA CloseHandle TerminateProcess WaitForSingleObject CreateProcessA CreateFileA GetLastError GetProcAddress DuplicateHandle GetCurrentProcess OpenProcess WriteFile SetFileTime GetFileAttributesExA GetStartupInfoA GetModuleHandleA Sleep FreeLibrary WideCharToMultiByte GetVersionExA GetSystemDirectoryA GetModuleFileNameA WinExec

user32

RegisterWindowMessageA SendMessageTimeoutA TranslateMessage GetDesktopWindow DispatchMessageA PostMessageA GetClassNameA GetMessageA EnumChildWindows GetWindowThreadProcessId EnumWindows ShowWindow CreateWindowExA RegisterClassExA DefWindowProcA PostQuitMessage

advapi32

GetUserNameA OpenSCManagerA DeleteService OpenServiceA StartServiceA RegCloseKey RegQueryValueExA RegOpenKeyExA ConvertSidToStringSidA LookupAccountNameA CreateServiceA CloseServiceHandle

shell32

SHGetSpecialFolderPathA

ole32

CoInitialize CoUninitialize

oleaut32

SysFreeString VariantClear

shlwapi

SHGetValueA SHSetValueA

msvcrt

atoi _strlwr _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit time srand fopen fwrite fflush fclose ??2@YAPAXI@Z ??3@YAXPAX@Z __CxxFrameHandler rand strstr strchr _stricmp sprintf _access wcslen

dbghelp

ImageNtHeader

Name

.text

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

116KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ndata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

mdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

edata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

cdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

idata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4c864316e010e7c891b9077b32f0ff48

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

msvcrt

dbghelp

generic