jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]51d55feecb6eb1c91fd4b0ae6b3eeae0

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.51d55feecb6eb1c91fd4b0ae6b3eeae0
Size 184KB
Sample261014-ds4hmafw2m
SHA256 b35274813051f66a54a6ac6187877a90a45f7a5aaf276ee63eee8a440b9dddaf
MD5 51d55feecb6eb1c91fd4b0ae6b3eeae0
SHA1 e6dc511e72db560c5fdb6dfd3e3407c2c092767b
SHA512 5316e08d595f76e7c8b253e9043f6bef26a1aefa46a1aef84546d0db63e4b9163cf479418f039abb1f7cfc71dd532767f504323c4cc4bfeff185f0f6f05c94f5
SSDEEP 3072:bCDIuLgxMgIGrmeUcsTOQMOji7LuPGB5bqJfoMMe:bcLKMtG6eUJyQMOjiSo5wD7
TLSH
T122049DF4DF706622EA32B8702C7716AA4F8F028C45A97C951A4EB2D0B4BBDFD651D344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.51d55feecb6eb1c91fd4b0ae6b3eeae0

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.51d55feecb6eb1c91fd4b0ae6b3eeae0

.exe 184KB

jaffacakes118_HEUR.Trojan.Win32.Generic.51d55feecb6eb1c91fd4b0ae6b3eeae0

IMPHASH 006b813ceeea314eba531ef1f9ca90d4
SHA256 b35274813051f66a54a6ac6187877a90a45f7a5aaf276ee63eee8a440b9dddaf
MD5 51d55feecb6eb1c91fd4b0ae6b3eeae0
SHA1 e6dc511e72db560c5fdb6dfd3e3407c2c092767b
SHA512 5316e08d595f76e7c8b253e9043f6bef26a1aefa46a1aef84546d0db63e4b9163cf479418f039abb1f7cfc71dd532767f504323c4cc4bfeff185f0f6f05c94f5
SSDEEP 3072:bCDIuLgxMgIGrmeUcsTOQMOji7LuPGB5bqJfoMMe:bcLKMtG6eUJyQMOjiSo5wD7
TLSH
T122049DF4DF706622EA32B8702C7716AA4F8F028C45A97C951A4EB2D0B4BBDFD651D344
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20480

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess OpenProcess WriteFile CreateFileA WinExec GetModuleFileNameA Sleep GetLastError DuplicateHandle GetVersionExA WideCharToMultiByte FreeLibrary TerminateProcess WaitForSingleObject CreateProcessA GetStartupInfoA GetModuleHandleA CloseHandle LoadLibraryA GetProcAddress GetSystemDirectoryA GetFileAttributesExA SetFileTime

user32

CreateWindowExA ShowWindow RegisterClassExA DispatchMessageA GetDesktopWindow TranslateMessage GetMessageA SendMessageTimeoutA RegisterWindowMessageA GetClassNameA PostMessageA EnumChildWindows GetWindowThreadProcessId EnumWindows DefWindowProcA PostQuitMessage

advapi32

LookupAccountNameA CreateServiceA DeleteService OpenServiceA OpenSCManagerA RegCloseKey RegQueryValueExA RegOpenKeyExA StartServiceA ConvertSidToStringSidA GetUserNameA CloseServiceHandle

shell32

SHGetSpecialFolderPathA

ole32

CoInitialize CoUninitialize

oleaut32

SysFreeString VariantClear

shlwapi

SHGetValueA SHSetValueA

msvcrt

time _stricmp _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit __CxxFrameHandler strstr strchr atoi wcslen ??2@YAPAXI@Z ??3@YAXPAX@Z _access _strlwr sprintf rand fclose fflush fwrite fopen srand

dbghelp

ImageNtHeader

Name

.text

Size

20KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

124KB

Virtual Size

121KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

qdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

odata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ndata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

mdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

edata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

cdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

idata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.51d55feecb6eb1c91fd4b0ae6b3eeae0

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

msvcrt

dbghelp

generic