jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4e6dea3feb6dc175fcb0569dc4441d6f

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4e6dea3feb6dc175fcb0569dc4441d6f
Size 2.0MB
Sample261014-dlmljaey2y
SHA256 735e02091de2312be3415e52621da6634839b613a0306715bee019f3af3b16e3
MD5 4e6dea3feb6dc175fcb0569dc4441d6f
SHA1 9e1e12e5cbb0404f9e89053485557e9947a61be8
SHA512 0461f5e68bdd0ae1d4640e5ce4b6c27c3fc903a9cc9b19eb35c1ae966d84686fa6712244f213faf47fa36c12f7807c95fe1440d38881af304fd1702e5d187c31
SSDEEP 24576:oDznweSWzCI/XOz+sR38JALdystaG6N7PRReN82p5:AwXWzCI/XU+sRMJALdLVOjRqtH
TLSH
T12F959E126311A112C9FA4837BDBD1D3B2E59B806122798DBFF624BD5D52DB702C22D3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4e6dea3feb6dc175fcb0569dc4441d6f

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4e6dea3feb6dc175fcb0569dc4441d6f

.exe 2.0MB

jaffacakes118_HEUR.Trojan.Win32.Generic.4e6dea3feb6dc175fcb0569dc4441d6f

IMPHASH c6351d7cd1359917495358775f7b05af
SHA256 735e02091de2312be3415e52621da6634839b613a0306715bee019f3af3b16e3
MD5 4e6dea3feb6dc175fcb0569dc4441d6f
SHA1 9e1e12e5cbb0404f9e89053485557e9947a61be8
SHA512 0461f5e68bdd0ae1d4640e5ce4b6c27c3fc903a9cc9b19eb35c1ae966d84686fa6712244f213faf47fa36c12f7807c95fe1440d38881af304fd1702e5d187c31
SSDEEP 24576:oDznweSWzCI/XOz+sR38JALdystaG6N7PRReN82p5:AwXWzCI/XU+sRMJALdLVOjRqtH
TLSH
T12F959E126311A112C9FA4837BDBD1D3B2E59B806122798DBFF624BD5D52DB702C22D3B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

62634

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo CloseHandle SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RaiseException RtlUnwind GetLastError FreeLibrary LoadLibraryExW HeapAlloc HeapReAlloc HeapFree ExitProcess GetModuleHandleExW GetModuleFileNameA GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetACP IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap GetFileType FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetStdHandle WriteConsoleW ReadConsoleW HeapSize CreateFileW

Name

.text

Size

150KB

Virtual Size

150KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.xxx

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

792B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4e6dea3feb6dc175fcb0569dc4441d6f

kernel32

generic