jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]371aa1c1a98ed6305a45884ee10f2203

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.371aa1c1a98ed6305a45884ee10f2203
Size 355KB
Sample261014-hfar1ag151
SHA256 7e3affb6bf9cedc782e352b622169d5adfc0ebc6a963f7ea47a1e5c4f6e7e8af
MD5 371aa1c1a98ed6305a45884ee10f2203
SHA1 615bacdaf2c1c61d73de3236ed01657887c40a56
SHA512 ead4618ddeb058789bafa4e33e5506a0229e9293a09af6f3e6cb79ea9020341eb6d26225dfbf112bcb537bf874cad971babd4b768093b54ea1d57d8fcc04448c
SSDEEP 6144:lggU1coHdLTqrjx3HxpUEiYErRhz57bYTTBkwrbGL9ZwkEbXT0Yw:lg97nqrjTDerRhlUTT+wrbGB1E4
TLSH
T123749D22F741C136D16E1136A899A3BD81BA71B14872C487F7C81B5D9F35393EB38B4A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.371aa1c1a98ed6305a45884ee10f2203

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.371aa1c1a98ed6305a45884ee10f2203

.dll 355KB

jaffacakes118_HEUR.Trojan.Win32.Generic.371aa1c1a98ed6305a45884ee10f2203

IMPHASH f47034fa9e712272f3324ac4a1510fb8
SHA256 7e3affb6bf9cedc782e352b622169d5adfc0ebc6a963f7ea47a1e5c4f6e7e8af
MD5 371aa1c1a98ed6305a45884ee10f2203
SHA1 615bacdaf2c1c61d73de3236ed01657887c40a56
SHA512 ead4618ddeb058789bafa4e33e5506a0229e9293a09af6f3e6cb79ea9020341eb6d26225dfbf112bcb537bf874cad971babd4b768093b54ea1d57d8fcc04448c
SSDEEP 6144:lggU1coHdLTqrjx3HxpUEiYErRhz57bYTTBkwrbGL9ZwkEbXT0Yw:lg97nqrjTDerRhlUTT+wrbGB1E4
TLSH
T123749D22F741C136D16E1136A899A3BD81BA71B14872C487F7C81B5D9F35393EB38B4A
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

167617

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

StrCmpIW UrlEscapeW UrlGetPartW StrStrIW PathMatchSpecW UrlUnescapeW

wininet

HttpOpenRequestW InternetCloseHandle InternetReadFile InternetQueryOptionW HttpQueryInfoW InternetSetCookieW InternetOpenW InternetSetOptionW HttpSendRequestW InternetCrackUrlW InternetConnectW

kernel32

SetEndOfFile CreateFileA GetModuleHandleA GetTimeZoneInformation SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA InitializeCriticalSectionAndSpinCount GetStringTypeW GetStringTypeA GetLocaleInfoA GetCurrentDirectoryA SetFilePointer GetDateFormatA GetTimeFormatA FlushFileBuffers GetConsoleMode GetConsoleCP ReadFile IsValidCodePage GetOEMCP GetACP GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetModuleFileNameA GetStartupInfoA GetFileType GetStdHandle SetHandleCount HeapReAlloc VirtualAlloc VirtualFree HeapDestroy HeapCreate ExitProcess HeapSize GetProcessHeap TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleW GetFullPathNameW GetTempFileNameW GetFileSize MapViewOfFile UnmapViewOfFile VirtualQuery CreateFileW LocalAlloc CreateFileMappingW CloseHandle LocalFree WaitForSingleObject TerminateThread Sleep SetThreadPriority GetExitCodeThread FreeLibrary WriteFile GetProcAddress LoadLibraryA DeleteFileW WideCharToMultiByte lstrlenW GetTempPathW GetSystemInfo GetWindowsDirectoryW GetVolumeInformationW CreateMutexW CreateProcessW GetTickCount ReleaseMutex GetSystemTime MoveFileExW SetEnvironmentVariableA HeapAlloc GetModuleFileNameW MultiByteToWideChar SetLastError lstrcmpW DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetLastError GetCPInfo LCMapStringW LCMapStringA RtlUnwind RaiseException FindFirstFileW InterlockedDecrement InterlockedIncrement GetDriveTypeA CompareStringA CompareStringW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCurrentThreadId GetCommandLineA GetSystemTimeAsFileTime ExitThread CreateThread FindClose FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeW

user32

wsprintfW SetWindowTextW SetWindowPos CallWindowProcW SetWindowLongW SendMessageW GetWindowTextW RealGetWindowClassW EnumChildWindows GetWindowLongW

ole32

CoInitialize CoCreateInstance CoUninitialize CoTaskMemFree

oleaut32

VariantChangeType VariantCopy SafeArrayDestroy SafeArrayPutElement SafeArrayCreateVector SysAllocStringLen SysFreeString SysAllocString SysStringLen SysStringByteLen SysAllocStringByteLen VarBstrCmp VariantInit VariantClear

ws2_32

inet_addr

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

rpcrt4

RpcStringFreeW UuidToStringW

urlmon

UrlMkGetSessionOption

imagehlp

MapAndLoad UnMapAndLoad

advapi32

CryptGetHashParam CryptDestroyHash CryptDecrypt CryptDestroyKey CryptCreateHash CryptEncrypt CryptDeriveKey RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW RegQueryValueExW RegCreateKeyW CryptGenRandom CryptReleaseContext CryptAcquireContextW CryptHashData

shell32

SHCreateDirectoryExW