jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4ec15e843abf4fa409b0cee9e77cbeba

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4ec15e843abf4fa409b0cee9e77cbeba
Size 331KB
Sample261014-dnbxtavv4m
SHA256 3693e8a934622643ca5a05b3519884e68b956b6883b86e860c3503b4b81cc2e2
MD5 4ec15e843abf4fa409b0cee9e77cbeba
SHA1 e21802561b112722a267c3fdeb8bbec6f2d4d903
SHA512 2842857bd64ce126f2b83b8b02216bbe9f9ba71cca438a42e55156509c8223e9b0a3f238f2a86bf677402f9034eee524ec8f91915e25086017c496477ef165e7
SSDEEP 6144:tziZsrdFoVsLbcsoCwGwKDF9YXzukoKeaOKZ8SoRJ2pIKrnewKkTa2Dd/5I7:tKsrPx4Ew+zAMxJETa2BK7
TLSH
T15574F1DAF6DC2443F4D56E390980BE37A757EC76362BB4D655F3024BDA2C080DD16922
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4ec15e843abf4fa409b0cee9e77cbeba

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.4ec15e843abf4fa409b0cee9e77cbeba

.dll 331KB

jaffacakes118_HEUR.Trojan.Win32.Generic.4ec15e843abf4fa409b0cee9e77cbeba

IMPHASH bae0c33070e04399493bf1dc0b76fecb
SHA256 3693e8a934622643ca5a05b3519884e68b956b6883b86e860c3503b4b81cc2e2
MD5 4ec15e843abf4fa409b0cee9e77cbeba
SHA1 e21802561b112722a267c3fdeb8bbec6f2d4d903
SHA512 2842857bd64ce126f2b83b8b02216bbe9f9ba71cca438a42e55156509c8223e9b0a3f238f2a86bf677402f9034eee524ec8f91915e25086017c496477ef165e7
SSDEEP 6144:tziZsrdFoVsLbcsoCwGwKDF9YXzukoKeaOKZ8SoRJ2pIKrnewKkTa2Dd/5I7:tKsrPx4Ew+zAMxJETa2BK7
TLSH
T15574F1DAF6DC2443F4D56E390980BE37A757EC76362BB4D655F3024BDA2C080DD16922
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15848

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle ReleaseSemaphore CreateSemaphoreA GetTempFileNameA GetTempPathA FreeLibrary LoadLibraryA WaitForSingleObject GetProcAddress EnterCriticalSection InitializeCriticalSection InterlockedExchange DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError FindClose FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileA GetCommandLineA GetVersion HeapFree HeapAlloc GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue GetCurrentThread ExitProcess FatalAppExitA SetUnhandledExceptionFilter TerminateProcess GetCurrentProcess HeapReAlloc HeapSize GetModuleHandleA GetFullPathNameA GetCurrentDirectoryA SetCurrentDirectoryA SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree WriteFile VirtualAlloc IsBadWritePtr IsBadReadPtr IsBadCodePtr UnhandledExceptionFilter SetFilePointer InterlockedDecrement InterlockedIncrement MultiByteToWideChar GetStringTypeA GetStringTypeW GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW GetTimeZoneInformation SetConsoleCtrlHandler SetStdHandle FlushFileBuffers IsValidLocale IsValidCodePage GetLocaleInfoA EnumSystemLocalesA GetUserDefaultLCID CompareStringA CompareStringW SetEnvironmentVariableA GetLocaleInfoW

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA

Sharing