jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]9f9913b235a95410ae1413b92af2d7d3

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.9f9913b235a95410ae1413b92af2d7d3
Size 120KB
Sample261014-hy4sssfa86
SHA256 48e64b80762bf70f0d951adfc5133e421bc14b01a54406dd34440c00619da888
MD5 9f9913b235a95410ae1413b92af2d7d3
SHA1 20712236d5b23ef5c241d8c95bbf8134c774a768
SHA512 65917f5a7266bc46c0b68dda56c5c93b9ef7e80ccf8911f7284c545fc1d65a11a423a89648a2893e0bb2241c2137fcadc0859117e8e8d6a3616274fa26f202c1
SSDEEP 1536:mYGWndTCu/+o8v+2Rf8NUq6xYgO7nN7EcMa1uayQ0kvkysijR3CKyd9thc4U:gCTCd857nhEcMiplVvauR3C9DthcB
TLSH
T103C3AF1274E1C0B2C2A201758981DB56CBF7FD366E3E9403B7D45A4E7FA46C19B3B282
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.9f9913b235a95410ae1413b92af2d7d3

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.9f9913b235a95410ae1413b92af2d7d3

.exe 120KB

jaffacakes118_HEUR.Trojan.Win32.Generic.9f9913b235a95410ae1413b92af2d7d3

IMPHASH ece6278d195fe70ce30ccfd1c3b1f256
SHA256 48e64b80762bf70f0d951adfc5133e421bc14b01a54406dd34440c00619da888
MD5 9f9913b235a95410ae1413b92af2d7d3
SHA1 20712236d5b23ef5c241d8c95bbf8134c774a768
SHA512 65917f5a7266bc46c0b68dda56c5c93b9ef7e80ccf8911f7284c545fc1d65a11a423a89648a2893e0bb2241c2137fcadc0859117e8e8d6a3616274fa26f202c1
SSDEEP 1536:mYGWndTCu/+o8v+2Rf8NUq6xYgO7nN7EcMa1uayQ0kvkysijR3CKyd9thc4U:gCTCd857nhEcMiplVvauR3C9DthcB
TLSH
T103C3AF1274E1C0B2C2A201758981DB56CBF7FD366E3E9403B7D45A4E7FA46C19B3B282
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

46166

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

urlmon

URLDownloadToFileA

comctl32

ord17

kernel32

CreateProcessA GetCommandLineA TerminateProcess RemoveDirectoryA GetCurrentProcess OpenProcess lstrcatA SetFileAttributesA FindClose WaitForSingleObject Sleep GetEnvironmentVariableA MoveFileA GetTempPathA GetShortPathNameA CreateDirectoryA GetStartupInfoA LocalFree GetFileAttributesA FindFirstFileA GetModuleFileNameA GetExitCodeProcess FindNextFileA GetModuleHandleA CompareStringA SetEndOfFile MoveFileExA GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle GetLocaleInfoA GetStringTypeW GetStringTypeA GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA HeapReAlloc VirtualAlloc VirtualFree HeapCreate GetLongPathNameA FormatMessageA DeleteFileA CloseHandle GetLastError ReadFile CreateFileA WriteConsoleW lstrcpyA CompareStringW SetUnhandledExceptionFilter HeapDestroy HeapSize GetFileType SetHandleCount GetCurrentDirectoryA GetFullPathNameA InitializeCriticalSection LoadLibraryA UnhandledExceptionFilter SetEnvironmentVariableA IsDebuggerPresent GetTimeFormatA GetDateFormatA ExitThread ResumeThread CreateThread GetSystemTimeAsFileTime GetProcAddress ExitProcess FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA HeapFree HeapAlloc GetVersionExA GetProcessHeap RaiseException RtlUnwind TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetTimeZoneInformation SetFilePointer EnterCriticalSection LeaveCriticalSection WriteFile GetConsoleCP GetConsoleMode GetStdHandle DeleteCriticalSection

user32

DialogBoxParamA ShowWindow BringWindowToTop KillTimer DestroyWindow TranslateMessage PostMessageA GetMessageA DispatchMessageA wsprintfA GetForegroundWindow GetDlgItem SetTimer GetWindowTextA SetWindowTextA EndDialog CreateDialogParamA ExitWindowsEx UpdateWindow BlockInput SendMessageA FindWindowA MessageBoxA GetDlgItemTextA

advapi32

RegCloseKey RegOpenKeyExA RegDeleteKeyA AdjustTokenPrivileges RegCreateKeyExA RegQueryValueExA RegDeleteValueA LookupPrivilegeValueA RegSetValueExA GetUserNameA OpenProcessToken

psapi

GetModuleBaseNameA EnumProcessModules EnumProcesses

shell32

SHFileOperationA SHGetFolderPathA SHCreateDirectoryExA ShellExecuteA