jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]38c362a8a8a42a733151b979c51ff5d8

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.38c362a8a8a42a733151b979c51ff5d8
Size 254KB
Sample261014-hfzfcsfa32
SHA256 3794c468ce6c4e2256c52cf488875e15eee8f4b42f24c5e95f952d2f8d802ebc
MD5 38c362a8a8a42a733151b979c51ff5d8
SHA1 112c9b5062ae9a67bcec99a5b0563670480dc3f2
SHA512 dddf0905d89b0c370be42d4185c53f90fcdb1de7793b31ac89034319f4e58214ad56c74af93b3bfcfcd6e7a8b31a7c5e64e24a701660ae147bce10fe90519478
SSDEEP 6144:K58BryY7fJ9VsvYWOQ9mI8aLZu+OjIxAwXj8Z/lY1qAEV:K58Ie9ObOQQ9aLg+OEm+8Nlsx
TLSH
T16744029672EC6DE0C9B1413B46F9BEBA1A7AF418077C752DD322062B19C3EE71674132
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.38c362a8a8a42a733151b979c51ff5d8

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.38c362a8a8a42a733151b979c51ff5d8

.exe 254KB

jaffacakes118_HEUR.Trojan.Win32.Generic.38c362a8a8a42a733151b979c51ff5d8

IMPHASH ef22e7a9ad726759faed388f79e237e0
SHA256 3794c468ce6c4e2256c52cf488875e15eee8f4b42f24c5e95f952d2f8d802ebc
MD5 38c362a8a8a42a733151b979c51ff5d8
SHA1 112c9b5062ae9a67bcec99a5b0563670480dc3f2
SHA512 dddf0905d89b0c370be42d4185c53f90fcdb1de7793b31ac89034319f4e58214ad56c74af93b3bfcfcd6e7a8b31a7c5e64e24a701660ae147bce10fe90519478
SSDEEP 6144:K58BryY7fJ9VsvYWOQ9mI8aLZu+OjIxAwXj8Z/lY1qAEV:K58Ie9ObOQQ9aLg+OEm+8Nlsx
TLSH
T16744029672EC6DE0C9B1413B46F9BEBA1A7AF418077C752DD322062B19C3EE71674132
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

54063

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetUserDefaultLCID GlobalFree WaitForSingleObject GetStringTypeExA GetFileSize FindNextFileW GetModuleHandleW FormatMessageW GetSystemTimeAsFileTime SetUnhandledExceptionFilter CreateThread LocalFree FindFirstFileW CreateDirectoryA IsDebuggerPresent FindNextFileA FreeLibrary FindClose FindFirstFileA GetSystemDirectoryA CreateMutexW GetTempPathW CloseHandle LCMapStringA GetTempFileNameW CreateDirectoryW GetCurrentThreadId CreateFileW ReleaseMutex GetCurrentDirectoryA UnhandledExceptionFilter lstrlenW VirtualAlloc

user32

LoadStringA

ws2_32

inet_addr select htonl closesocket socket listen WSAGetLastError WSACleanup ntohs connect recv accept send inet_ntoa htons getsockopt WSASetLastError getservbyport getservbyname gethostbyname gethostbyaddr bind __WSAFDIsSet ioctlsocket getsockname WSAStartup

wininet

DetectAutoProxyUrl

advapi32

GetUserNameA RegCloseKey RegOpenKeyExA OpenThreadToken GetTokenInformation RegQueryValueExA

ole32

CoTaskMemFree

iassvcs

IASUninitialize IASVariantChangeType IASGetLocalDictionary IASAdler32

iassam

DllUnregisterServer IASParmsQueryUserProperty DllCanUnloadNow

Name

.ZOVfnC

Size

3KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.text

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.JKRbqAc

Size

1024B

Virtual Size

860B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.HkqHH

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.QEYl

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gLOyEi

Size

512B

Virtual Size

226B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

7KB

Virtual Size

190KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

207KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fzUTokc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.MniMk

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.moghV

Size

512B

Virtual Size

249B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nMIHej

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.RqxsG

Size

512B

Virtual Size

419B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.38c362a8a8a42a733151b979c51ff5d8

kernel32

user32

ws2_32

wininet

advapi32

ole32

iassvcs

iassam

generic