jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]5bab84b31631d2b24014f108d6f853e1

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.5bab84b31631d2b24014f108d6f853e1
Size 109KB
Sample261014-dy1c6aec69
SHA256 a052b7789a469a17da8fa88f69600cf6a82fbbf20d49e05ff15fea3fb6112227
MD5 5bab84b31631d2b24014f108d6f853e1
SHA1 cbd02ecc697422974a870843d77eca245062698c
SHA512 6c74e83f360e85734346aef9d6b48f6cb9a16f692ca075f499477319aad70342c6ae17c385f8be1f326b6b2b60c4dcdb56211aa9935c8a68b4e6d5a5ec592f24
SSDEEP 1536:NmxsNtLsPT0jYlQsEKvc9i2/fFmKo+fRQx7FZT/8o+nFnPaEFYa6OS67FNqxnnnQ:aM58Ulm4fRQx7rT/8o+nFnPn/jNwnGp
TLSH
T13AB3E1297447C0CFD4C399312BD1579AB939B9A18A20D6D6F89027BBA5363C885EC7C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.5bab84b31631d2b24014f108d6f853e1

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.5bab84b31631d2b24014f108d6f853e1

.dll 109KB

jaffacakes118_HEUR.Trojan.Win32.Generic.5bab84b31631d2b24014f108d6f853e1

IMPHASH 2331372f73c258073501346238e93dfe
SHA256 a052b7789a469a17da8fa88f69600cf6a82fbbf20d49e05ff15fea3fb6112227
MD5 5bab84b31631d2b24014f108d6f853e1
SHA1 cbd02ecc697422974a870843d77eca245062698c
SHA512 6c74e83f360e85734346aef9d6b48f6cb9a16f692ca075f499477319aad70342c6ae17c385f8be1f326b6b2b60c4dcdb56211aa9935c8a68b4e6d5a5ec592f24
SSDEEP 1536:NmxsNtLsPT0jYlQsEKvc9i2/fFmKo+fRQx7FZT/8o+nFnPaEFYa6OS67FNqxnnnQ:aM58Ulm4fRQx7rT/8o+nFnPn/jNwnGp
TLSH
T13AB3E1297447C0CFD4C399312BD1579AB939B9A18A20D6D6F89027BBA5363C885EC7C3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

13150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

J:\kKpj\mvOgs\kGbf\AksqGgjZ.pdb

Name

.text

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.temp

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

203B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.crt

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jaffacakes118_HEUR.Trojan.Win32.Generic.5bab84b31631d2b24014f108d6f853e1

comctl32

kernel32

gdi32

user32

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.5bab84b31631d2b24014f108d6f853e1

comctl32

kernel32

gdi32

user32

generic