jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4cb9f989eb78c2fda445baf56af6b46b

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4cb9f989eb78c2fda445baf56af6b46b
Size 176KB
Sample261014-dd3msaec22
SHA256 bfb0c6fb2b5daaf4744f3a6031fc342cec493cae99ec3c6160d3803881bc9e47
MD5 4cb9f989eb78c2fda445baf56af6b46b
SHA1 43106680c30f585fe3b9a0695622f778e4ba412e
SHA512 a0040705a4dd01934ce7f821105675645a8792b9ec907f56d3b8d185140ba89403ce5711cd3dc53d497edbcfda9238b23af30097b1d8c92131fee98213784dd9
SSDEEP 3072:/ACu3bFfp9tVs6Wm7spapksmVLSdZIGbwDSgJSbs:/Al9tVs65maMMdZIDSgL
TLSH
T149049CF2D964AF25E092B8F801074E2DF3DF7914FD5F0121E275833F9B68A0249D99A5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4cb9f989eb78c2fda445baf56af6b46b

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4cb9f989eb78c2fda445baf56af6b46b

.exe 176KB

jaffacakes118_HEUR.Trojan.Win32.Generic.4cb9f989eb78c2fda445baf56af6b46b

IMPHASH 685330116833fbcbac708959b8142eea
SHA256 bfb0c6fb2b5daaf4744f3a6031fc342cec493cae99ec3c6160d3803881bc9e47
MD5 4cb9f989eb78c2fda445baf56af6b46b
SHA1 43106680c30f585fe3b9a0695622f778e4ba412e
SHA512 a0040705a4dd01934ce7f821105675645a8792b9ec907f56d3b8d185140ba89403ce5711cd3dc53d497edbcfda9238b23af30097b1d8c92131fee98213784dd9
SSDEEP 3072:/ACu3bFfp9tVs6Wm7spapksmVLSdZIGbwDSgJSbs:/Al9tVs65maMMdZIDSgL
TLSH
T149049CF2D964AF25E092B8F801074E2DF3DF7914FD5F0121E275833F9B68A0249D99A5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVersionExA GetLastError DuplicateHandle GetCurrentProcess OpenProcess WriteFile CreateFileA GetModuleFileNameA Sleep WideCharToMultiByte FreeLibrary TerminateProcess WaitForSingleObject CreateProcessA GetStartupInfoA GetModuleHandleA WinExec GetSystemDirectoryA GetFileAttributesExA SetFileTime CloseHandle LoadLibraryA GetProcAddress

user32

CreateWindowExA ShowWindow RegisterClassExA SendMessageTimeoutA RegisterWindowMessageA GetClassNameA PostMessageA EnumChildWindows GetWindowThreadProcessId EnumWindows DispatchMessageA GetDesktopWindow TranslateMessage GetMessageA DefWindowProcA PostQuitMessage

advapi32

CreateServiceA LookupAccountNameA GetUserNameA CloseServiceHandle OpenSCManagerA StartServiceA OpenServiceA RegCloseKey RegQueryValueExA RegOpenKeyExA DeleteService ConvertSidToStringSidA

shell32

SHGetSpecialFolderPathA

ole32

CoInitialize CoUninitialize

oleaut32

SysFreeString VariantClear

shlwapi

SHGetValueA SHSetValueA

msvcrt

??3@YAXPAX@Z _stricmp _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit time srand __CxxFrameHandler strstr strchr atoi wcslen ??2@YAPAXI@Z _strlwr sprintf _access fclose fflush fwrite fopen rand

dbghelp

ImageNtHeader

Name

.text

Size

20KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

120KB

Virtual Size

117KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

odata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ndata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

mdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

edata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

cdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

idata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4cb9f989eb78c2fda445baf56af6b46b

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

msvcrt

dbghelp

generic