jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]031dae58049c4cc28c2da3fdc7c0c498

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.031dae58049c4cc28c2da3fdc7c0c498
Size 336KB
Sample261014-g5rldagy6s
SHA256 1693954f94a29e533d14afafc53d8cdb386f05bb5fcfc20492bf3218441f62e8
MD5 031dae58049c4cc28c2da3fdc7c0c498
SHA1 3099cca70a6912fe54246f60e2613d5f06eebb4b
SHA512 61b642dad44305c0c225d9ccfadb45262bfc4114aa02f24d20c8c9880657ae5ee872913b54cb001278626b86e9054a4791b994f468900d0079079d42506310bf
SSDEEP 6144:X7tlsS4GXF6V3Ki2AOoG5bN307mnwoQxyJTzT3w/S3k9rlo59vSuFmI4K610OZ3L:Xv4G16V3Ki2Px50noQxyBi2kLo/KuFmz
TLSH
T13F742382AEBA48F1DC8A43754E33856FAE30E4F48A21CE558340795F7C73959371A3D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.031dae58049c4cc28c2da3fdc7c0c498

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.031dae58049c4cc28c2da3fdc7c0c498

.exe 336KB

jaffacakes118_HEUR.Trojan.Win32.Generic.031dae58049c4cc28c2da3fdc7c0c498

IMPHASH 60cb6935699d6e5b55ca282968ab94e0
SHA256 1693954f94a29e533d14afafc53d8cdb386f05bb5fcfc20492bf3218441f62e8
MD5 031dae58049c4cc28c2da3fdc7c0c498
SHA1 3099cca70a6912fe54246f60e2613d5f06eebb4b
SHA512 61b642dad44305c0c225d9ccfadb45262bfc4114aa02f24d20c8c9880657ae5ee872913b54cb001278626b86e9054a4791b994f468900d0079079d42506310bf
SSDEEP 6144:X7tlsS4GXF6V3Ki2AOoG5bN307mnwoQxyJTzT3w/S3k9rlo59vSuFmI4K610OZ3L:Xv4G16V3Ki2Px50noQxyBi2kLo/KuFmz
TLSH
T13F742382AEBA48F1DC8A43754E33856FAE30E4F48A21CE558340795F7C73959371A3D9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

854585

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

kernel32

DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection VirtualFree VirtualAlloc LocalFree LocalAlloc GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenA lstrcpynA LoadLibraryExA GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLastError GetCommandLineA FreeLibrary FindFirstFileA FindClose ExitProcess WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException GetStdHandle GetFileSize GetFileType CreateFileA CloseHandle TlsSetValue TlsGetValue LocalAlloc GetModuleHandleA lstrcpyA lstrcmpA WriteProcessMemory WriteFile WinExec WaitForSingleObject VirtualQuery VirtualFreeEx VirtualAllocEx VirtualAlloc SleepEx Sleep SizeofResource SetThreadLocale SetFilePointer SetEvent SetErrorMode SetEndOfFile ResetEvent ReadProcessMemory ReadFile OpenProcess MultiByteToWideChar MulDiv LockResource LoadResource LoadLibraryA LeaveCriticalSection InitializeCriticalSection GlobalUnlock GlobalSize GlobalReAlloc GlobalHandle GlobalLock GlobalFree GlobalFindAtomA GlobalDeleteAtom GlobalAlloc GlobalAddAtomA GetWindowsDirectoryA GetVersionExA GetVersion GetUserDefaultLCID GetTickCount GetThreadLocale GetSystemInfo GetStringTypeExA GetStdHandle GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLocalTime GetLastError GetFullPathNameA GetFileSize GetFileAttributesA GetDiskFreeSpaceA GetDateFormatA GetCurrentThreadId GetCurrentProcessId GetComputerNameA GetCPInfo GetACP FreeResource InterlockedExchange FreeLibrary FormatMessageA FindResourceA FindFirstFileA FindClose FileTimeToLocalFileTime FileTimeToDosDateTime EnumCalendarInfoA EnterCriticalSection DeleteFileA DeleteCriticalSection CreateThread CreateProcessA CreateMutexA CreateFileA CreateEventA CreateDirectoryA CopyFileA CompareStringA CloseHandle Sleep GetModuleHandleA LoadLibraryA VirtualAlloc VirtualFree GetModuleFileNameA ExitProcess

user32

GetKeyboardType LoadStringA MessageBoxA CharNextA CreateWindowExA WindowFromPoint WinHelpA WaitMessage UpdateWindow UnregisterClassA UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoA ShowWindow ShowScrollBar ShowOwnedPopups ShowCursor SetWindowsHookExA SetWindowTextA SetWindowPos SetWindowPlacement SetWindowLongA SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropA SetParent SetMenuItemInfoA SetMenu SetForegroundWindow SetFocus SetCursor SetClassLongA SetCapture SetActiveWindow SendMessageTimeoutA SendMessageA ScrollWindow ScreenToClient RemovePropA RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageA RegisterClipboardFormatA RegisterClassA RedrawWindow PtInRect PostQuitMessage PostMessageA PeekMessageA OffsetRect OemToCharA MoveWindow MessageBoxA MapWindowPoints MapVirtualKeyA LoadStringA LoadKeyboardLayoutA LoadIconA LoadCursorA LoadBitmapA KillTimer IsZoomed IsWindowVisible IsWindowEnabled IsWindow IsRectEmpty IsIconic IsDialogMessageA IsChild InvalidateRect IntersectRect InsertMenuItemA InsertMenuA InflateRect GetWindowThreadProcessId GetWindowTextA GetWindowRect GetWindowPlacement GetWindowLongA GetWindowDC GetTopWindow GetThreadDesktop GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropA GetParent GetWindow GetMessageTime GetMenuStringA GetMenuState GetMenuItemInfoA GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextA GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardData GetClientRect GetClassNameA GetClassInfoA GetCapture GetActiveWindow FrameRect FindWindowExA FindWindowA FillRect EqualRect EnumWindows EnumThreadWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem DrawTextA DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawEdge DispatchMessageA DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcA DefMDIChildProcA DefFrameProcA CreatePopupMenu CreateMenu CreateIcon CreateDesktopA ClientToScreen CheckMenuItem CallWindowProcA CallNextHookEx BeginPaint CharNextA CharLowerBuffA CharLowerA CharToOemA AdjustWindowRectEx ActivateKeyboardLayout

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey RegQueryValueExA RegOpenKeyExA RegCloseKey

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit GetErrorInfo GetActiveObject SysFreeString

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

gdi32

UnrealizeObject StretchBlt SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetMapMode SetEnhMetaFileBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SelectPalette SelectObject SaveDC RestoreDC RectVisible RealizePalette PlayEnhMetaFile PatBlt MoveToEx MaskBlt LineTo LPtoDP IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsA GetTextExtentPoint32A GetSystemPaletteEntries GetStockObject GetPixel GetPaletteEntries GetObjectA GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionA GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits ExcludeClipRect DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreatePenIndirect CreatePalette CreateHalftonePalette CreateFontIndirectA CreateEnhMetaFileA CreateDIBitmap CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileA CloseEnhMetaFile BitBlt

ole32

CreateStreamOnHGlobal IsAccelerator OleDraw OleSetMenuDescriptor CoTaskMemFree ProgIDFromCLSID StringFromCLSID CoCreateInstance CoGetClassObject CoUninitialize CoInitialize IsEqualGUID

comctl32

ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_SetDragCursorImage ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Remove ImageList_DrawEx ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls

shell32

ShellExecuteA

wininet

InternetReadFile InternetOpenUrlA InternetOpenA InternetCloseHandle HttpQueryInfoA DeleteUrlCacheEntry

urlmon

URLDownloadToFileA

netapi32

Netbios

n0�w<@29�[�}�y7e#��g��d��|��(�ȳW��~/��+��!�;��U�+R�]c�4��7�}��*�}t��ɦ�'��f�;5�� Ѓv��cyQ��o�\�_��O�� z��Z,!�k6��Q��zI��SKv��6�v�W��:��&an�F~#k3*Nۮ�z�(��6Ds�{� vU9��a�&T<Ñ��)8�0�N=�ЧL�m�2�6�͆�*�o l%�Ś�� g��w�P�0dмǉ�l� ��O2!im9��sv7=�oc��:�j�3D��u�F��X+V��/Q��#��Twi��,�O��0�'� ��@WN�J��O�:��1�x��0�e K��{P(ͬ�ٍKŇUL}�Hq&�2�Ω��a��t%!Ζ|��*Љ�\�I� ��Ud�ޠyǁ��@h4l�xvZr��O��U��w�$�KR�D@��9O��E�8boūx�`��)�c�7ե�{�^�PV�t��(`��U)>��W�(0[n6��H��$b`��G��4l`X2��B�G� �*�ae��Od�6�]銢��yE�XJcnD��i��u,Ó��Zv��4h��d��o �dC� ��h��Zx�HT@�i3��z��V{�`1!,��o�f3X��{��3T2v1?+��?��AEwm۩�T��%(��c� D�-��;#%��0��OG�~*��P��^��P3@�n�L�[�{.��).�0��sR��5`�WȤB&X5��X��M3��D ��h�p�/�+�Hنk��߃Y�9 �u��8)��Ux��s�F_{4���a�cl�E��u�E>��Ϣ��|%��i?��Uw��yA��b��L�Q��f�n1�ķq��W{ϽI�M��;Q��4=j��6��ʉ`�s��!��J��iگ ��o�N��|�\� e ��i� �;��'q�<�n�н ��e�тJ��G@M�P�5+�e��I5�8�.ظ�� A�&�(�� U�Pt��0>��(Q�e��ૠeQ ��CQUp��Іw]��~B��+��Ǭ7:N��~#�n=,)v��ޏ@c_��G�ڶ�$��w+�B��zx*xG��P��Q��l8 #��P3?�Y\�5��4�ʀ��釱mS� �yz��1%H�pB��C�l�pH��E��K��X�W�j*�Sr-V��lV�c3�@��'��) ж��AbEռ��-��HC�sL��g�R�t��n �}MaG{yg.�j�IP�7�� pG�o �,T�G�q>��w6��m��{��\��fݏ#6\��n�(v�|z>��WO�p�C��JĂ�x�+ ��2"�r�Gr:�o�֤�hX��7��$�Ⓠ<7��=�RҔ}3�k��l!.N��p��ڏ$� jҭ��HAj�&M�!�D��Bː/*ᘇ��U��<`i��%�DC �ﰵro��y��k ��`��!�hxK_��Ҋ!�1J �+`��O?R�'��ܱd�%Mg�_��H!�t'�vt�]��V��>8`XA\�.��>��0fbj��Ҧ�_��?=�� &�5t�H^��p��#mT�荽?0L�+��~5gbհ�w��<8Q�~��,�~i�{��`s�7��W�E��8B�e�i� 8�Β��"�"`ǚ��{Qd;��l)O��rs�pI[3�@6�Iω2�~�,0B�^EƗ).�s�"�K��\�aOn��+~��>]�|'�g�l�D��F��y�c4��g��W�ܫW��j*Ǿ��-ZV�1�<QPk8�14o4�$I��<��ϊB,�!��!��pQt��Õ�t��M�7;��QkP�w�~}�T~6v$x��(A�}��o�ۋdP�v��d�T��k�B\� \.��e�{�MYow^��l��5d��`�:��rf'��ID�~��>hXVD��B�"�OK��T��#ߑ��e0p�J��=�`��rm��e�̈ �T"^��Nh�@��>4'y�ؘ��U'��;PךER_殏��"м��=a��z�YwZ��[I^(�ϣ6�O�|jy��^�A�Kc4��[�\e; ��\�f�o�->U�h.��Q;�ܩ��~xuxͽN�|��J��<+��;n�=IR)R�Q$Jޭt�}��Smb48�i&��}��H=&0�ѹ�ඛE�؋��@^�\�� 2�+m��T2n^��n��b�O��K�6�ϿSY�QТ�L�1Ԓe�%�I�<�1I��-F�<��jK��z.��_��E��d,(��y��v紋�I��r��ĉ,��=ƙ� ��ƕ��y_�#��d"�>��Ky��M�s�l� xB��̆1�\]|��]��s��;�.]�G�;��v�Wܙ�TB�!Sq��=�b�< �K�ai.��x��Ǎ$�9��=��[��È4�Ro_� AIu�l��Q��M��Zq��%ew|89�=ʅ5\�u�74ZRr�i��e*L�¸;ܣ³%�<- ��5�ow/i 8�c��6i��W<�vv��/��]��n�zvj�g��*=e��}B�� b��e�羋y�r��,�p�4�,Pە� me&��Ҍ#��5j:-�D?�2�kjW}u=�p��fSԔr�6�n4�<1v��eI�#6@F,K�g��M��1�� iƏq�Z�`MGڮ��E�C��#��13�%/%�?R큼��]��U�we�\�K5u:�IF^��AJ�ߺn��;��c��}��<{�M�!��}��,2��J@��]��]�l�eJ��>_�t֞��ٖ��3�<�WF�g�

Name

CODE

Size

Virtual Size

418KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fer0

Size

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

18KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fer1

Size

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.fer2

Size

316KB

Virtual Size

316KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

412B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.031dae58049c4cc28c2da3fdc7c0c498

kernel32

user32

advapi32

oleaut32

version

gdi32

ole32

comctl32

shell32

wininet

urlmon

netapi32

generic