jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]5a20c01019a20c256ff2ba9dce286686

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.5a20c01019a20c256ff2ba9dce286686
Size 328KB
Sample261014-dvg3eaxycz
SHA256 8762d0e3c70fbc036d306809051ab45d7d9ddcf43ec6d0822cd5889887b32b81
MD5 5a20c01019a20c256ff2ba9dce286686
SHA1 892e7dce04ed9cd21ea86eb690be809c1c4de6f0
SHA512 f0de59ee7817e569b167b166314740ee58f2fb4ef808ae2dfa468f42c9877ae6b5e2e0330e76b22d0fc6fd33b5b4342a1ba999ca8cff8b69d74446befcbfe9e7
SSDEEP 6144:hIGUk4PgQVrbYpCZKrHDA3K6uzvfpNsoEU6c:hIJtpaCZKA3K6OvhJH6c
TLSH
T125647D0373A1C1B6CACF003525255B1E52BAFE615BA5C2C3F7943E9E9D322D25F39289
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.5a20c01019a20c256ff2ba9dce286686

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.5a20c01019a20c256ff2ba9dce286686

.dll 328KB

jaffacakes118_HEUR.Trojan.Win32.Generic.5a20c01019a20c256ff2ba9dce286686

IMPHASH 5a348709539a943239abd34c78b51583
SHA256 8762d0e3c70fbc036d306809051ab45d7d9ddcf43ec6d0822cd5889887b32b81
MD5 5a20c01019a20c256ff2ba9dce286686
SHA1 892e7dce04ed9cd21ea86eb690be809c1c4de6f0
SHA512 f0de59ee7817e569b167b166314740ee58f2fb4ef808ae2dfa468f42c9877ae6b5e2e0330e76b22d0fc6fd33b5b4342a1ba999ca8cff8b69d74446befcbfe9e7
SSDEEP 6144:hIGUk4PgQVrbYpCZKrHDA3K6uzvfpNsoEU6c:hIJtpaCZKA3K6OvhJH6c
TLSH
T125647D0373A1C1B6CACF003525255B1E52BAFE615BA5C2C3F7943E9E9D322D25F39289
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

159811

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

TranslateAcceleratorA UnregisterClassA GetForegroundWindow GetWindowThreadProcessId AttachThreadInput GetActiveWindow GetFocus GetSystemMetrics ShowWindow wsprintfA SetForegroundWindow SetActiveWindow SetFocus SetTimer KillTimer ReleaseCapture CreateAcceleratorTableA IsWindow GetDesktopWindow GetWindow DestroyAcceleratorTable BeginPaint EndPaint CallWindowProcA FillRect CharNextA GetClassNameA GetDlgItem GetParent IsChild SetCapture RedrawWindow InvalidateRgn InvalidateRect ReleaseDC GetDC ScreenToClient ClientToScreen GetClientRect SetWindowPos MoveWindow GetSysColor RegisterWindowMessageA GetClassInfoExA LoadCursorA RegisterClassExA GetWindowTextLengthA GetWindowTextA SetWindowTextA DefWindowProcA SendMessageA DestroyWindow CreateWindowExA GetWindowLongA SetWindowLongA GetMessageA TranslateMessage DispatchMessageA

advapi32

RegDeleteKeyA RegCloseKey RegCreateKeyExA RegOpenKeyExA RegSetValueExA RegQueryInfoKeyA RegEnumKeyExA RegQueryValueExA RegDeleteValueA

oleaut32

VariantInit VariantClear SysAllocStringLen SysAllocString VarUI4FromStr DispCallFunc SysStringLen LoadRegTypeLi LoadTypeLi UnRegisterTypeLi RegisterTypeLi SysStringByteLen OleCreateFontIndirect SysFreeString

kernel32

GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA SetHandleCount GetFileType SetStdHandle GetCurrentDirectoryA GetFullPathNameA GetConsoleMode GetConsoleCP HeapSize LCMapStringW LCMapStringA GetOEMCP GetCPInfo TlsFree TlsSetValue TlsAlloc TlsGetValue GetStdHandle WriteFile ExitProcess HeapCreate HeapDestroy GetCommandLineA SystemTimeToFileTime LocalFileTimeToFileTime SetFileTime FindFirstFileA GetDriveTypeA FileTimeToLocalFileTime FileTimeToSystemTime QueryPerformanceCounter GetTickCount GetStringTypeA GetStringTypeW FindClose RtlUnwind GetSystemInfo HeapReAlloc GetSystemTimeAsFileTime IsDebuggerPresent SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent HeapFree InterlockedCompareExchange GetVersionExA GetLocaleInfoA GetACP InitializeCriticalSection MultiByteToWideChar WideCharToMultiByte lstrlenW RaiseException GetLastError DeleteCriticalSection lstrlenA lstrcmpiA InterlockedIncrement InterlockedDecrement IsDBCSLeadByte LeaveCriticalSection EnterCriticalSection FreeLibrary SizeofResource LoadResource FindResourceA LoadLibraryExA GetModuleHandleA GetModuleFileNameA Sleep WaitForSingleObject CreateThread GetCurrentProcessId GetCurrentThreadId lstrcmpA VirtualAlloc GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect VirtualFree HeapAlloc GetProcessHeap VirtualQuery CloseHandle CreateProcessA GetTempPathA LockResource SetEnvironmentVariableA DisableThreadLibraryCalls SetThreadLocale GetThreadLocale GlobalUnlock GlobalLock GlobalAlloc FlushInstructionCache GetCurrentProcess MulDiv SetLastError ReadFile SetFilePointer CreateFileA LocalFree InterlockedExchange FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW GetTimeZoneInformation SetEndOfFile CompareStringA CompareStringW UnhandledExceptionFilter GetProcessId

ole32

CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoGetClassObject CoCreateInstance CoUninitialize CoInitialize StringFromGUID2 CreateStreamOnHGlobal OleInitialize OleUninitialize OleLockRunning CLSIDFromString CLSIDFromProgID

gdi32

GetStockObject GetObjectA CreateSolidBrush GetDeviceCaps BitBlt CreateCompatibleDC CreateCompatibleBitmap DeleteDC SelectObject DeleteObject

shlwapi

StrStrIA