jaffacakes118_not-a-virus[.]HEUR[.]Monitor[.]Win32[.]Generic[.]5cbf40b174b84224aee6bb9eb1586c78

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.Monitor.Win32.Generic.5cbf40b174b84224aee6bb9eb1586c78
Size 778KB
Sample261014-ftel1aee86
SHA256 3a8d87ec45fe1534a01820bbf311ba7817d088bf5f934bd1fdcf6c461df22cea
MD5 5cbf40b174b84224aee6bb9eb1586c78
SHA1 757e3aef673b5a90bcea6ca9b65861e6513d14b0
SHA512 d8d7a7213577d90d60cdebffbd531d603394ac79bb0f4719bf364ba48c34b36e524b282932bd94ff1729981eee0a7ca80170cefc2544d37c299684fdd742e4cc
SSDEEP 24576:XnJJAb+MudZVGCcE2k5Ki1CDS5axQN9vn:XJ8+LotE2yr5E6Pvn
TLSH
T17B050203B78042BAD4808A71341E62729B36BD25D7587247B7C9BF273471513EF17A6E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.Monitor.Win32.Generic.5cbf40b174b84224aee6bb9eb1586c78

File Explorer

jaffacakes118_not-a-virus.HEUR.Monitor.Win32.Generic.5cbf40b174b84224aee6bb9eb1586c78

.exe 778KB

jaffacakes118_not-a-virus.HEUR.Monitor.Win32.Generic.5cbf40b174b84224aee6bb9eb1586c78

IMPHASH a6d1f237a38b6e7d3a48b606fa0d7939
SHA256 3a8d87ec45fe1534a01820bbf311ba7817d088bf5f934bd1fdcf6c461df22cea
MD5 5cbf40b174b84224aee6bb9eb1586c78
SHA1 757e3aef673b5a90bcea6ca9b65861e6513d14b0
SHA512 d8d7a7213577d90d60cdebffbd531d603394ac79bb0f4719bf364ba48c34b36e524b282932bd94ff1729981eee0a7ca80170cefc2544d37c299684fdd742e4cc
SSDEEP 24576:XnJJAb+MudZVGCcE2k5Ki1CDS5axQN9vn:XJ8+LotE2yr5E6Pvn
TLSH
T17B050203B78042BAD4808A71341E62729B36BD25D7587247B7C9BF273471513EF17A6E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA SetFileSecurityA SetFileSecurityW

kernel32

CloseHandle CompareStringA CreateDirectoryA CreateDirectoryW CreateFileA CreateFileW DeleteFileA DeleteFileW DosDateTimeToFileTime ExitProcess ExpandEnvironmentStringsA FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindResourceA FreeLibrary GetCPInfo GetCommandLineA GetCurrentDirectoryA GetCurrentProcess GetDateFormatA GetFileAttributesA GetFileAttributesW GetFileType GetFullPathNameA GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetNumberFormatA GetProcAddress GetProcessHeap GetStdHandle GetTempPathA GetTickCount GetTimeFormatA GetVersionExA GlobalAlloc HeapAlloc HeapFree HeapReAlloc IsDBCSLeadByte LoadLibraryA LocalFileTimeToFileTime MoveFileA MoveFileExA MultiByteToWideChar ReadFile SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetFileAttributesA SetFileAttributesW SetFilePointer SetFileTime SetLastError Sleep SystemTimeToFileTime WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpiA lstrlenA

comctl32

ord17

comdlg32

CommDlgExtendedError GetOpenFileNameA

gdi32

DeleteObject

shell32

SHBrowseForFolderA SHChangeNotify SHFileOperationA SHGetFileInfoA SHGetMalloc SHGetSpecialFolderLocation ShellExecuteExA SHGetPathFromIDListA

user32

CharToOemBuffA CharUpperA CopyRect CreateWindowExA DefWindowProcA DestroyIcon DestroyWindow DialogBoxParamA DispatchMessageA EnableWindow EndDialog FindWindowExA GetClassNameA GetClientRect GetDlgItem GetDlgItemTextA GetMessageA GetParent GetSysColor GetSystemMetrics GetWindow GetWindowLongA GetWindowRect GetWindowTextA IsWindow IsWindowVisible LoadBitmapA LoadCursorA LoadIconA LoadStringA MapWindowPoints MessageBoxA OemToCharA OemToCharBuffA PeekMessageA PostMessageA RegisterClassExA SendDlgItemMessageA SendMessageA SetDlgItemTextA SetFocus SetMenu SetWindowLongA SetWindowPos SetWindowTextA ShowWindow TranslateMessage UpdateWindow WaitForInputIdle wsprintfA wvsprintfA

ole32

CLSIDFromString CoCreateInstance CreateStreamOnHGlobal OleInitialize OleUninitialize