jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]1441c5744350f00c1978685fe9b5acf9

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.1441c5744350f00c1978685fe9b5acf9
Size 391KB
Sample261014-g8d5fszycs
SHA256 0def81c946f57d5cc43ef5a6aab86c00066d15fa3debcdcb5f31fc16ca691c39
MD5 1441c5744350f00c1978685fe9b5acf9
SHA1 69b1e3119b404aefc6229014e415e1cf25638ade
SHA512 19afa31f09289bc2f8395e9e6762a171c97a85f9f03b8cdbca5fa6d84c80df8d994183830114d8ecd6a2bb154013461b7502f39518e39bcb555a83aa0db4c871
SSDEEP 6144:E4j8NNOVYhIDOwp20puFcEqFR4LSX+jEEnaZTb6Ux2MHc7SaRNUseNKzQVEXO:E/NN6Y2CwpWcEqIRAEnW31ZE9RNxUZ
TLSH
T1C584E1049B02525AF817207BEC513CBC12E17FAA255B340E2EFB14AE5D53251E17EABF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.1441c5744350f00c1978685fe9b5acf9

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.1441c5744350f00c1978685fe9b5acf9

.exe 391KB

jaffacakes118_HEUR.Trojan.Win32.Generic.1441c5744350f00c1978685fe9b5acf9

IMPHASH fa04ebe720d8aee3da9617c65c2ef79e
SHA256 0def81c946f57d5cc43ef5a6aab86c00066d15fa3debcdcb5f31fc16ca691c39
MD5 1441c5744350f00c1978685fe9b5acf9
SHA1 69b1e3119b404aefc6229014e415e1cf25638ade
SHA512 19afa31f09289bc2f8395e9e6762a171c97a85f9f03b8cdbca5fa6d84c80df8d994183830114d8ecd6a2bb154013461b7502f39518e39bcb555a83aa0db4c871
SSDEEP 6144:E4j8NNOVYhIDOwp20puFcEqFR4LSX+jEEnaZTb6Ux2MHc7SaRNUseNKzQVEXO:E/NN6Y2CwpWcEqIRAEnW31ZE9RNxUZ
TLSH
T1C584E1049B02525AF817207BEC513CBC12E17FAA255B340E2EFB14AE5D53251E17EABF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

27116

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegDeleteKeyW

user32

SetCursorPos DispatchMessageW PostQuitMessage OffsetRect GetCapture GetScrollInfo ReleaseDC GetAsyncKeyState PeekMessageW GetWindowRect TranslateMessage DefWindowProcW IsIconic GetCursorPos KillTimer GetSubMenu LoadCursorW TrackPopupMenu MessageBoxW GetSysColor SetCursor EmptyClipboard WindowFromPoint GetDC CreateDialogParamW TranslateAcceleratorW IsWindow GetMessageW AppendMenuW CreateWindowExW MapWindowPoints SetScrollInfo GetFocus RegisterClipboardFormatW RegisterClassW CreatePopupMenu CopyRect ShowWindow SendMessageW PostMessageW DestroyMenu GetParent

kernel32

InterlockedDecrement InterlockedIncrement VirtualAlloc HeapReAlloc GetCPInfo HeapAlloc GetACP GetOEMCP LCMapStringA MultiByteToWideChar GetProcAddress LoadLibraryA GetStringTypeA LCMapStringW GetStringTypeW GetLastError SetLastError TlsGetValue TlsSetValue GetCurrentThreadId TlsAlloc SetHandleCount GetEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetFileType GetStdHandle GetStartupInfoA VirtualFree HeapDestroy HeapCreate GetModuleHandleA GetEnvironmentVariableA GetVersionExA InitializeCriticalSection WriteFile HeapFree RtlUnwind LeaveCriticalSection EnterCriticalSection FreeEnvironmentStringsW GetModuleFileNameA FreeEnvironmentStringsA TerminateProcess ExitProcess GetCurrentProcess UnhandledExceptionFilter GetVersion SetFilePointer GetCommandLineA CreateFileMappingW TerminateThread

Sharing