jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4f272c31c3bff9f975ecce3260ccdbde

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4f272c31c3bff9f975ecce3260ccdbde
Size 68KB
Sample261014-dn17psey5s
SHA256 30371ef430f71f5f90f69c38e27ff9bce6a93ddc562d41e40c7732729c2f5f3f
MD5 4f272c31c3bff9f975ecce3260ccdbde
SHA1 018d0e33d5bc12e2a2643935db51a9a67cfde1b1
SHA512 66d3f957fdfad7ef30f4b8815478483d6e71fefc0fe0f0541b5b30f9abbbd6e286118746bdb5ddc25d333538ed3565444f3e3ccb1881cf45efa54c65e3b9f2b4
SSDEEP 768:MRgrxJRhYBuxMTLEQCvqp8vDZSSG+xg3xi+wo0nzlO9katnhyAJrA4XCSI4vTjb:M2rxJ8XE/vqir60Bzqnhyz4Sun
TLSH
T182639D139B339B0BD0033EFC33C5A7D5AEA97AB6500092DFB990774D46269B0D4E96E1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4f272c31c3bff9f975ecce3260ccdbde

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4f272c31c3bff9f975ecce3260ccdbde

.exe 68KB

jaffacakes118_HEUR.Trojan.Win32.Generic.4f272c31c3bff9f975ecce3260ccdbde

IMPHASH 1636dac349a63f8ed37e711c2b6586ba
SHA256 30371ef430f71f5f90f69c38e27ff9bce6a93ddc562d41e40c7732729c2f5f3f
MD5 4f272c31c3bff9f975ecce3260ccdbde
SHA1 018d0e33d5bc12e2a2643935db51a9a67cfde1b1
SHA512 66d3f957fdfad7ef30f4b8815478483d6e71fefc0fe0f0541b5b30f9abbbd6e286118746bdb5ddc25d333538ed3565444f3e3ccb1881cf45efa54c65e3b9f2b4
SSDEEP 768:MRgrxJRhYBuxMTLEQCvqp8vDZSSG+xg3xi+wo0nzlO9katnhyAJrA4XCSI4vTjb:M2rxJ8XE/vqir60Bzqnhyz4Sun
TLSH
T182639D139B339B0BD0033EFC33C5A7D5AEA97AB6500092DFB990774D46269B0D4E96E1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

19726

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

I:\BvFxpNrg\byluI\NyowYNz\rxuhhn.pdb

Name

.text

Size

512B

Virtual Size

136B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.code

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

386B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jaffacakes118_HEUR.Trojan.Win32.Generic.4f272c31c3bff9f975ecce3260ccdbde

user32

gdi32

shlwapi

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4f272c31c3bff9f975ecce3260ccdbde

user32

gdi32

shlwapi

kernel32

generic