jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]197e8b3168d6522d79e1d452f71402fe

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.197e8b3168d6522d79e1d452f71402fe
Size 79KB
Sample261014-hacdmsgz8w
SHA256 02f5cc6cbb05dfa2a374eec3cf81318611cfad35f9d7eb29b21f5dda9374a14f
MD5 197e8b3168d6522d79e1d452f71402fe
SHA1 1ac8f9931ad0b6406aeb50a1a12021ad7d61d508
SHA512 7d4bd36e9c543352a02a189037221c75621baa951c47d677a2fbb20dfd56105637326927a39a3b0e310aad92df64f6ba4151e18ad537919b666c62b7efe95bcd
SSDEEP 1536:LCqN1hZ5/4T/MZmfqAij2qH+kKBIc0wcapgV:GMhQT3Ria/Lka
TLSH
T12F836C177290E4B1E02218306064D6B2593EFD316A7A4497F7897FFBAE701F25728B47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.197e8b3168d6522d79e1d452f71402fe

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.197e8b3168d6522d79e1d452f71402fe

.exe 79KB

jaffacakes118_HEUR.Trojan.Win32.Generic.197e8b3168d6522d79e1d452f71402fe

IMPHASH b3e7af2f2cc66bde05f1d8502685c40f
SHA256 02f5cc6cbb05dfa2a374eec3cf81318611cfad35f9d7eb29b21f5dda9374a14f
MD5 197e8b3168d6522d79e1d452f71402fe
SHA1 1ac8f9931ad0b6406aeb50a1a12021ad7d61d508
SHA512 7d4bd36e9c543352a02a189037221c75621baa951c47d677a2fbb20dfd56105637326927a39a3b0e310aad92df64f6ba4151e18ad537919b666c62b7efe95bcd
SSDEEP 1536:LCqN1hZ5/4T/MZmfqAij2qH+kKBIc0wcapgV:GMhQT3Ria/Lka
TLSH
T12F836C177290E4B1E02218306064D6B2593EFD316A7A4497F7897FFBAE701F25728B47
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualProtect VirtualFree GetShortPathNameA SetPriorityClass SetThreadPriority GetTickCount CreateThread GetSystemTime lstrlenW GetVersionExW IsWow64Process OpenProcess Sleep GetExitCodeProcess WaitForSingleObject CreateProcessW GetModuleHandleW LoadLibraryA HeapSize HeapReAlloc VirtualAlloc GetStringTypeW MultiByteToWideChar LCMapStringW WideCharToMultiByte RtlUnwind HeapAlloc EnterCriticalSection LeaveCriticalSection IsValidCodePage GetOEMCP GetACP GetCPInfo WriteFile ReadFile OpenFile CreateFileW GetModuleFileNameW CloseHandle GetCurrentProcess TerminateProcess DeleteFileW ReleaseMutex GetProcAddress LoadLibraryW GetLastError CreateMutexA GetCurrentProcessId QueryPerformanceCounter HeapCreate DeleteCriticalSection GetFileType GetSystemTimeAsFileTime GetCommandLineW HeapSetInformation GetStartupInfoW HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement ExitProcess GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount IsProcessorFeaturePresent

user32

DefWindowProcW BeginPaint EndPaint GetSysColorBrush SendMessageW CreateWindowExW GetSystemMetrics RegisterClassExW LoadCursorW LoadIconW DispatchMessageW TranslateMessage TranslateAcceleratorW GetMessageW LoadAcceleratorsW SystemParametersInfoW GetWindowTextW SetWindowTextW SetCursor

gdi32

LineTo CreatePen TextOutW SelectObject DeleteObject BitBlt CreateFontA SetBkMode SetTextColor CreateFontW MoveToEx

advapi32

AdjustTokenPrivileges

shlwapi

StrCmpW StrCpyW StrCatW

psapi

EnumProcesses