jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4ca261517901379d86176c2b78412aee

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4ca261517901379d86176c2b78412aee
Size 45KB
Sample261014-ddntmaxwev
SHA256 c6f0a0c8ad9b482d7912e502753ced7199964306d704644eaee2b27a5db478fa
MD5 4ca261517901379d86176c2b78412aee
SHA1 1dfb0ef1cfa29bb8fe9fb58f31545ecf3bd7ba2f
SHA512 eeedaf389484f9299ffc6897fbb5fce1c7d1fb52a3adeea49d2ccd168964dc78ced8f6f9ff72eb9a82272afb54ed397a062347785745e684ed2a391f4636727a
SSDEEP 768:20xgq1jyo9fbf6I8cuotTKUHxMuexZh6q6nnu+7Wi:26bG+OIOTUHxUbJ+yi
TLSH
T17B23F80BEA508034E0D10075D2125FB79AF968B37359C7A3E3E599A678383E4EE3951F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4ca261517901379d86176c2b78412aee

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4ca261517901379d86176c2b78412aee

.exe 45KB

jaffacakes118_HEUR.Trojan.Win32.Generic.4ca261517901379d86176c2b78412aee

IMPHASH fc4cfc48f87bf067e69c65d6d68c79c3
SHA256 c6f0a0c8ad9b482d7912e502753ced7199964306d704644eaee2b27a5db478fa
MD5 4ca261517901379d86176c2b78412aee
SHA1 1dfb0ef1cfa29bb8fe9fb58f31545ecf3bd7ba2f
SHA512 eeedaf389484f9299ffc6897fbb5fce1c7d1fb52a3adeea49d2ccd168964dc78ced8f6f9ff72eb9a82272afb54ed397a062347785745e684ed2a391f4636727a
SSDEEP 768:20xgq1jyo9fbf6I8cuotTKUHxMuexZh6q6nnu+7Wi:26bG+OIOTUHxUbJ+yi
TLSH
T17B23F80BEA508034E0D10075D2125FB79AF968B37359C7A3E3E599A678383E4EE3951F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\x\Desktop\Home\Code\Trik v6.0 - WORK - JS\Release\Trik.pdb

msvcrt

_controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit fclose wcscmp wcslen strcmp strncmp memmove strncpy _snprintf fwprintf strtok atoi strchr malloc _snwprintf srand fgets rand sprintf strstr strlen memset strcpy strcat _wfopen feof fprintf fscanf

ws2_32

WSAStartup select inet_addr gethostbyname inet_pton WSACleanup htons closesocket getnameinfo socket connect recv send

urlmon

URLDownloadToFileW

wininet

InternetReadFile InternetOpenA InternetOpenUrlA InternetCloseHandle InternetOpenW InternetOpenUrlW

dnsapi

DnsFree DnsQuery_A

shlwapi

PathFindFileNameA PathFileExistsW

kernel32

GetTickCount ExitThread lstrlenA DeleteFileW GetLocalTime CreateProcessW GetLocaleInfoA ExpandEnvironmentStringsW Sleep CloseHandle TerminateThread WriteFile CreateThread lstrcpyA SetFileAttributesW CopyFileW CreateDirectoryW GetModuleFileNameW GetLastError CreateMutexA ReadFile SetFilePointer GetFileSize GetSystemTime GetModuleHandleA GetStartupInfoA CreateFileW ExitProcess GetTimeZoneInformation FileTimeToSystemTime WaitForSingleObject FileTimeToLocalFileTime

user32

CharUpperA wsprintfA

advapi32

RegQueryValueExW RegOpenKeyExW RegDeleteValueW RegCloseKey RegSetValueExW