jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]50f0a4d99dc0d458ef210a1b4c576279

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.50f0a4d99dc0d458ef210a1b4c576279
Size 369KB
Sample261014-drpyvafv9k
SHA256 333948a08ddb30c5bbbff7fed67fb0bc9d6e6ad9e5866e33e77c1790cbfcb799
MD5 50f0a4d99dc0d458ef210a1b4c576279
SHA1 9a311f1b19f6e6edc2cdd72ebf9f2ae4acfe9f2b
SHA512 e4c98495f4dbea9145fe9bb0ec1edd765ba417d80ba38c892758f35a8d208abdf9e7d9f2529b20eb5073e3f5dbc48f9d85bd65afe70a75741c4a7e35c04809d0
SSDEEP 6144:F6wPFyZE4tACLH4Oyj+4ypr1Rjp5SDloA6HbD+gokKwFJI4UpFy6O66unNcOM:EwPFyzACUTrAIrF/MOM
TLSH
T15484026237C63895F36A1D781B8E5AA027E3EC64BEF4A409A691025CCF3F6C17C15F61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.50f0a4d99dc0d458ef210a1b4c576279

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.50f0a4d99dc0d458ef210a1b4c576279

.dll 369KB

jaffacakes118_HEUR.Trojan.Win32.Generic.50f0a4d99dc0d458ef210a1b4c576279

IMPHASH 661061bc581381761f66e6792b3e6a1b
SHA256 333948a08ddb30c5bbbff7fed67fb0bc9d6e6ad9e5866e33e77c1790cbfcb799
MD5 50f0a4d99dc0d458ef210a1b4c576279
SHA1 9a311f1b19f6e6edc2cdd72ebf9f2ae4acfe9f2b
SHA512 e4c98495f4dbea9145fe9bb0ec1edd765ba417d80ba38c892758f35a8d208abdf9e7d9f2529b20eb5073e3f5dbc48f9d85bd65afe70a75741c4a7e35c04809d0
SSDEEP 6144:F6wPFyZE4tACLH4Oyj+4ypr1Rjp5SDloA6HbD+gokKwFJI4UpFy6O66unNcOM:EwPFyzACUTrAIrF/MOM
TLSH
T15484026237C63895F36A1D781B8E5AA027E3EC64BEF4A409A691025CCF3F6C17C15F61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11196

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

SHDeleteKeyA

setupapi

SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiCallClassInstaller SetupDiGetDeviceRegistryPropertyA SetupDiGetClassDevsA SetupDiSetClassInstallParamsA SetupDiSetDeviceRegistryPropertyA

comctl32

ord17

kernel32

LoadLibraryA SetLastError LocalFree FormatMessageA GetLastError lstrlenA LocalAlloc Sleep DeleteFileA GetWindowsDirectoryA CreateThread RtlUnwind InitializeCriticalSection GetLocaleInfoA GetStringTypeW GetStringTypeA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter HeapSize GetVersionExA TlsGetValue HeapAlloc GetCommandLineA HeapFree GetProcessHeap GetStartupInfoA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP GetProcAddress GetModuleHandleA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapDestroy HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType

user32

SendDlgItemMessageA SetCursor wsprintfA PostQuitMessage PostMessageA EndDialog DialogBoxParamA LoadCursorA

advapi32

RegFlushKey RegOpenKeyExA RegQueryValueExA RegSetValueExA