jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4e4b92530554d9d915c4864293e4ce90

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4e4b92530554d9d915c4864293e4ce90
Size 104KB
Sample261014-dkwstaey2t
SHA256 1e8419f1cf07f30d7cb6748ebcd1195d7443ceb83781536e55ef5361ea002293
MD5 4e4b92530554d9d915c4864293e4ce90
SHA1 8dcaa7945c96ebb9ba0b26423dbb64c833f9bee4
SHA512 435ff1fa4e5b3bed4134a5d9563e3a1bbb3bef0f46e4932d949886dd04a6ab241e59ad763fe64fe838af0ad777611bf4f9f559467e40349653fc06c2ac41e3fe
SSDEEP 1536:CCtTSIBnMpN1GNOltbMdclo6f1/S35HqXpDfpg+mc0:LApN1JdMdao81/SJipDfpgx
TLSH
T1B1A33A01F380C5DEF4E115FF54E65B3CBA6FBE641705A88363A89A090C76B95AF2035E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4e4b92530554d9d915c4864293e4ce90

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4e4b92530554d9d915c4864293e4ce90

.dll 104KB

jaffacakes118_HEUR.Trojan.Win32.Generic.4e4b92530554d9d915c4864293e4ce90

IMPHASH 3d1480ab64a485c7086b6ab8644caec9
SHA256 1e8419f1cf07f30d7cb6748ebcd1195d7443ceb83781536e55ef5361ea002293
MD5 4e4b92530554d9d915c4864293e4ce90
SHA1 8dcaa7945c96ebb9ba0b26423dbb64c833f9bee4
SHA512 435ff1fa4e5b3bed4134a5d9563e3a1bbb3bef0f46e4932d949886dd04a6ab241e59ad763fe64fe838af0ad777611bf4f9f559467e40349653fc06c2ac41e3fe
SSDEEP 1536:CCtTSIBnMpN1GNOltbMdclo6f1/S35HqXpDfpg+mc0:LApN1JdMdao81/SJipDfpgx
TLSH
T1B1A33A01F380C5DEF4E115FF54E65B3CBA6FBE641705A88363A89A090C76B95AF2035E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

69589

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

lstrcpyA DeleteFileA GetLastError lstrlenA lstrcatA FindClose LocalFree FindNextFileA RemoveDirectoryA GetFileSize ReadFile LocalAlloc SetFilePointer InterlockedExchange WriteFile Sleep GetModuleFileNameA CreateProcessA TerminateThread CreateEventA GetTickCount GetVersionExA ExitProcess ReleaseMutex GetPrivateProfileStringA lstrcmpiA GetCurrentThreadId SetEvent CloseHandle LoadLibraryA MoveFileA CancelIo FindFirstFileA GetProcAddress

user32

LoadCursorA GetCursorInfo wsprintfA GetSystemMetrics DestroyCursor CharNextA

advapi32

RegOpenKeyA RegCloseKey RegQueryValueExA GetLengthSid

shell32

SHGetSpecialFolderPathA

msvcrt

_strupr _strnicmp ??3@YAXPAX@Z memcpy memmove ceil _ftol strlen strstr __CxxFrameHandler memset ??2@YAPAXI@Z memcmp _CxxThrowException free malloc _except_handler3 strrchr strcmp strcpy strcat strncat strchr realloc atoi _beginthreadex calloc ??1type_info@@UAE@XZ _initterm _adjust_fdiv _strnset _strcmpi

ws2_32

closesocket WSAStartup gethostname recv socket gethostbyname select getsockname send htons connect setsockopt WSAIoctl WSACleanup

msvcp60

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

wininet

InternetOpenA

avicap32

capGetDriverDescriptionA