jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]46d0e8e47cd9e230eb675c9513b38a41

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.46d0e8e47cd9e230eb675c9513b38a41
Size 612KB
Sample261014-hkb6mafa39
SHA256 5e2f6b4bde054cc1de313292f9e0a54715e265d6513aeb91867048b2e422aa0a
MD5 46d0e8e47cd9e230eb675c9513b38a41
SHA1 e74587c0b4b03a27255dbee7aab05bf6ab297d50
SHA512 58874e75a7b86e70a905f3ad7a41fddee57beef5a9c121f1ab6cb3d56c97b8e1247cb9b7fefb03f2bca4c29140a46392929c6ee7258dcb9bdd8d7aeb1e23adb4
SSDEEP 12288:Mhi/S+zMKHk6RRM8gl/xpAG74oYxjMSQFkT+vk:Ai/SpKE6RRM8gl/xGhCSQ8
TLSH
T144D41856A6F1837EC5CA02B485B7630D236D7DC11B28D7CBA3D86F894C309CAF5B9249
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.46d0e8e47cd9e230eb675c9513b38a41

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.46d0e8e47cd9e230eb675c9513b38a41

.dll 612KB

jaffacakes118_HEUR.Trojan.Win32.Generic.46d0e8e47cd9e230eb675c9513b38a41

IMPHASH f695cdf46a2669cf479cd27d9b9d5d49
SHA256 5e2f6b4bde054cc1de313292f9e0a54715e265d6513aeb91867048b2e422aa0a
MD5 46d0e8e47cd9e230eb675c9513b38a41
SHA1 e74587c0b4b03a27255dbee7aab05bf6ab297d50
SHA512 58874e75a7b86e70a905f3ad7a41fddee57beef5a9c121f1ab6cb3d56c97b8e1247cb9b7fefb03f2bca4c29140a46392929c6ee7258dcb9bdd8d7aeb1e23adb4
SSDEEP 12288:Mhi/S+zMKHk6RRM8gl/xpAG74oYxjMSQFkT+vk:Ai/SpKE6RRM8gl/xGhCSQ8
TLSH
T144D41856A6F1837EC5CA02B485B7630D236D7DC11B28D7CBA3D86F894C309CAF5B9249
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

406551

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\miha\bho\Browser.Helpd3\Browser.Help\Release\rvrs.pdb

libcurl

curl_global_cleanup curl_easy_setopt curl_easy_init curl_global_init curl_formfree curl_formadd curl_easy_perform

kernel32

RaiseException InitializeCriticalSection DeleteCriticalSection GetLastError lstrcmpiW CreateTimerQueueTimer DeleteTimerQueueTimer InterlockedIncrement GetTickCount InterlockedDecrement FreeLibrary MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW GetModuleHandleW GetModuleFileNameW CreateProcessA CreateSemaphoreW CloseHandle WaitForSingleObject ReleaseSemaphore OpenSemaphoreW GetACP DeleteTimerQueue EnterCriticalSection LeaveCriticalSection OpenMutexW CreateMutexW CreateTimerQueue GetCurrentThreadId SetThreadLocale GetThreadLocale LockResource FindResourceExW GetVersionExA Process32NextW Process32FirstW CreateToolhelp32Snapshot CreateFileW Sleep GetCurrentProcessId lstrlenA WriteFile ReadFile GetFileSize ExitProcess GetVolumeInformationW SetErrorMode GetFileTime GetWindowsDirectoryW CreateThread GetCommandLineW InitializeCriticalSectionAndSpinCount GetTempPathW GetExitCodeProcess CreateProcessW GetSystemDirectoryW SetFileTime WideCharToMultiByte HeapFree GetProcessHeap InterlockedExchange GetLocaleInfoA HeapDestroy HeapAlloc HeapReAlloc HeapSize GetConsoleMode GetConsoleCP SetFilePointer QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount IsValidCodePage lstrlenW SetEndOfFile CreateFileA GetOEMCP TerminateThread WriteConsoleW GetConsoleOutputCP WriteConsoleA GetStringTypeW GetStringTypeA FlushFileBuffers SetStdHandle GetCPInfo SetLastError TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleFileNameA GetStdHandle HeapCreate VirtualFree GetCommandLineA VirtualQuery GetSystemInfo GetModuleHandleA GetProcAddress VirtualAlloc VirtualProtect GetUserDefaultLCID GetStringTypeExW LCMapStringA LCMapStringW LoadLibraryA InterlockedCompareExchange RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime

user32

LoadStringW UnregisterClassA SetWindowPos GetForegroundWindow GetMessageW ShowWindow PostMessageW GetKeyboardState GetActiveWindow FindWindowExW PostThreadMessageW CharNextW AllowSetForegroundWindow

advapi32

RegEnumKeyExW GetUserNameW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW

ole32

CoCreateInstance CoTaskMemFree CoTaskMemAlloc CoUninitialize CoInitialize StringFromGUID2 OleRun CLSIDFromProgID CLSIDFromString CoTaskMemRealloc

oleaut32

SysAllocString VariantClear GetErrorInfo VariantChangeType RegisterTypeLi UnRegisterTypeLi LoadTypeLi LoadRegTypeLi VarUI4FromStr SysStringLen SysStringByteLen SysAllocStringByteLen SysFreeString VariantInit

shlwapi

UrlEscapeW