jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]ebbca9f11b5f14972f94a83567a3ef46

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.ebbca9f11b5f14972f94a83567a3ef46
Size 240KB
Sample261014-jdnfrafb55
SHA256 600746cad322834366d692c3e340f2ebb63086508d6d104e6a805c453082daa0
MD5 ebbca9f11b5f14972f94a83567a3ef46
SHA1 36645f386eee82f216e6fa98343420ff57fd73aa
SHA512 0396ae7b1ba8fc3e45f2ed2193094862cfc009de9433605dab99a30f742519ddddf4cb94ade27ad711d5b24232693f08ab7c0c83e4f9a31b74924e70a7e849ed
SSDEEP 3072:hfZ2kTKXzsTC6/BqzKDLX9g0tx/mz+9gns9+ua6HvPF6FAPbbBk8jiruQt9Pl058:hfZ/AKDaAuaN0uHvPhkaMuQt9PjeFDr
TLSH
T1063402156A6F0820FB9F353DA4EF7FF681693AB12F12D6634BA097284D0121CCE5562F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.ebbca9f11b5f14972f94a83567a3ef46

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.ebbca9f11b5f14972f94a83567a3ef46

.dll 240KB

jaffacakes118_HEUR.Trojan.Win32.Generic.ebbca9f11b5f14972f94a83567a3ef46

IMPHASH 80776b90793baa5047ddbd7d358b6de9
SHA256 600746cad322834366d692c3e340f2ebb63086508d6d104e6a805c453082daa0
MD5 ebbca9f11b5f14972f94a83567a3ef46
SHA1 36645f386eee82f216e6fa98343420ff57fd73aa
SHA512 0396ae7b1ba8fc3e45f2ed2193094862cfc009de9433605dab99a30f742519ddddf4cb94ade27ad711d5b24232693f08ab7c0c83e4f9a31b74924e70a7e849ed
SSDEEP 3072:hfZ2kTKXzsTC6/BqzKDLX9g0tx/mz+9gns9+ua6HvPF6FAPbbBk8jiruQt9Pl058:hfZ/AKDaAuaN0uHvPhkaMuQt9PjeFDr
TLSH
T1063402156A6F0820FB9F353DA4EF7FF681693AB12F12D6634BA097284D0121CCE5562F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

49196

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

PathFindFileNameW

advapi32

RegOpenKeyExA RegSetValueExW RegCloseKey RegCreateKeyExW RegDeleteKeyW RegOpenKeyExW RegQueryValueExA RegQueryValueExW

shell32

SHGetSettings DragFinish SHGetSpecialFolderPathW ShellAboutW DragQueryFileW ShellExecuteExW

kernel32

LoadModule MulDiv MultiByteToWideChar OpenJobObjectA ResumeThread SetEvent SetThreadPriority lstrcmpW ConvertDefaultLocale CreateFileA ExitProcess FileTimeToSystemTime LoadLibraryExA LoadLibraryA HeapCreate HeapAlloc GlobalDeleteAtom GlobalAddAtomW GetVersionExA GetTimeFormatW GetTickCount GetStartupInfoW GetModuleHandleW GetModuleHandleA GetLocalTime GetCurrentProcess GetCommandLineA FreeLibrary FormatMessageW FindResourceW FindFirstFileExW

msvcrt

free __CxxFrameHandler __dllonexit __setusermatherr __wgetmainargs _adjust_fdiv _controlfp _except_handler3 _exit _ftol _onexit wcstod wcslen wcscoll wcscmp memmove iswspace exit _wcsicmp _wcsdup _wcmdln _purecall

ole32

CLSIDFromString CoTaskMemFree CreateILockBytesOnHGlobal OleInitialize OleRegGetUserType OleUninitialize ReadClassStg ReleaseStgMedium StgCreateDocfileOnILockBytes StringFromCLSID

user32

UnpackDDElParam ChangeDisplaySettingsA CharToOemBuffA CountClipboardFormats CreateMDIWindowW DeleteMenu DialogBoxParamW EnumPropsExA EnumWindows EqualRect GetAsyncKeyState GetWindowInfo MsgWaitForMultipleObjects OemToCharBuffA OffsetRect RemoveMenu SendMessageW SetCursor SetRectEmpty SetTimer SetWindowLongW TranslateMessage

gdi32

TextOutW CreateDCW CreateCompatibleDC CreateICW CreatePen CreateScalableFontResourceW CreateSolidBrush DPtoLP DeleteObject EnumFontFamiliesExW Escape ExcludeClipRect FillPath GetBitmapBits GetBkColor GetDCOrgEx GetMetaFileA GetObjectW GetPaletteEntries GetTextMetricsW PtVisible RectVisible Rectangle ScaleViewportExtEx SelectObject SetBkMode SetDCBrushColor SetPixel SetSystemPaletteUse SetTextColor CreateDIBitmap

comdlg32

GetOpenFileNameW CommDlgExtendedError ChooseFontW GetSaveFileNameW