jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]b01d444a546b7e8b603f182b40aa0041

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.b01d444a546b7e8b603f182b40aa0041
Size 31KB
Sample261014-h263bsfa99
SHA256 3d055763e755d442f3bf96dffa25ab98bebd84c321b2123d7a1992b2b9dbf3ad
MD5 b01d444a546b7e8b603f182b40aa0041
SHA1 8f07702612bc87159f6911eeb4860655d8bdb77c
SHA512 d208367bb9dd5fc5b648623e87f00a2288a768ed37074245c79087d4e3c633b3eefb6a680ab5c4c177eeba581427442b3aeb3463bac95ad4a23c91ab1971e4bb
SSDEEP 768:1V4wxeKkrmbzw37oYD7C/pH8AKghqD2RJXs:1V4wxehSw397C/dDkqRJ8
TLSH
T19DE26C137A4344B7E396023875512B7ECBFCA9316A1654B6E72247CE1CB09C3EEB6243
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.b01d444a546b7e8b603f182b40aa0041

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.b01d444a546b7e8b603f182b40aa0041

.dll 31KB

jaffacakes118_HEUR.Trojan.Win32.Generic.b01d444a546b7e8b603f182b40aa0041

IMPHASH 84c029a02de0e7918adafd19bc967878
SHA256 3d055763e755d442f3bf96dffa25ab98bebd84c321b2123d7a1992b2b9dbf3ad
MD5 b01d444a546b7e8b603f182b40aa0041
SHA1 8f07702612bc87159f6911eeb4860655d8bdb77c
SHA512 d208367bb9dd5fc5b648623e87f00a2288a768ed37074245c79087d4e3c633b3eefb6a680ab5c4c177eeba581427442b3aeb3463bac95ad4a23c91ab1971e4bb
SSDEEP 768:1V4wxeKkrmbzw37oYD7C/pH8AKghqD2RJXs:1V4wxehSw397C/dDkqRJ8
TLSH
T19DE26C137A4344B7E396023875512B7ECBFCA9316A1654B6E72247CE1CB09C3EEB6243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CreateThread WaitForSingleObject ReadFile GetFileSize SetFilePointer GetLastError CreateEventA GetModuleFileNameA GetTempPathA GetWindowsDirectoryA GetSystemDirectoryA SetFileAttributesA GetCommandLineA MultiByteToWideChar GlobalLock CreateFileA WriteFile GlobalUnlock GlobalFree CloseHandle LoadLibraryA GetProcAddress GlobalAlloc VirtualProtect GetModuleHandleA Sleep ExitProcess DeleteFileA GetCurrentDirectoryA GetPrivateProfileStringA

user32

GetParent GetWindowThreadProcessId EnumWindows wsprintfA GetWindowTextA ReleaseDC GetWindowRect GetDC GetDesktopWindow GetClientRect CallWindowProcA GetClassNameA SetWindowLongA RegisterShellHookWindow RegisterWindowMessageA

gdi32

CreateDCA GetDeviceCaps DeleteObject BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC GetDIBits RealizePalette SelectPalette GetStockObject GetObjectA DeleteDC

gdiplus

GdipCloneImage GdipAlloc GdipFree GdipGetImageEncodersSize GdipGetImageEncoders GdiplusStartup GdipDisposeImage GdiplusShutdown GdipSaveImageToFile GdipLoadImageFromFile

msvcp60

??0_Lockit@std@@QAE@XZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??0Init@ios_base@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ

ws2_32

WSAStartup send recv socket inet_addr htons connect gethostbyname inet_ntoa closesocket WSACleanup

wininet

InternetOpenUrlA InternetCloseHandle InternetReadFile InternetOpenA

msvcrt

strrchr _access strcat memset strchr strncpy free __dllonexit _onexit _initterm _adjust_fdiv _getpid _stricmp _strlwr _strrev strstr abs malloc wcscmp ??2@YAPAXI@Z memcpy __CxxFrameHandler strcmp strlen atoi strcpy sprintf

netapi32

Netbios