jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]f5826dd6652aeb93d5d1548cc2389ad1

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.f5826dd6652aeb93d5d1548cc2389ad1
Size 136KB
Sample261014-jgblcsfb62
SHA256 857bbfcff6e0bde057da6d1a9882886ebcc7c15e2d269148ab97bcff5c75a507
MD5 f5826dd6652aeb93d5d1548cc2389ad1
SHA1 1c9c7e250cc50c21d6be6ea2c6efd2911d8c7673
SHA512 65794f0c4d848f676c4dc4a85ef276d8a3bb88f6f5419b3f559523cabf3edb5b0b73e5a372567bc3788b84ce0342cc10672c0df26724cc9eafdd915497e4cf0f
SSDEEP 3072:IvD5qZz/Ormi/doxFVub0bX5bjVbwjcC4yafQJWzvX2obZfqb:IVqhOq0WGb0bX5lwjT4LwWzfrfq
TLSH
T1BAD3A062B2E180F6C69B113D6969E73F577FFA3540A0ACC763D11E8A2972942DA25303
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.f5826dd6652aeb93d5d1548cc2389ad1

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.f5826dd6652aeb93d5d1548cc2389ad1

.dll 136KB

jaffacakes118_HEUR.Trojan.Win32.Generic.f5826dd6652aeb93d5d1548cc2389ad1

IMPHASH 7a34d49c902ac73099f95f2e629a5626
SHA256 857bbfcff6e0bde057da6d1a9882886ebcc7c15e2d269148ab97bcff5c75a507
MD5 f5826dd6652aeb93d5d1548cc2389ad1
SHA1 1c9c7e250cc50c21d6be6ea2c6efd2911d8c7673
SHA512 65794f0c4d848f676c4dc4a85ef276d8a3bb88f6f5419b3f559523cabf3edb5b0b73e5a372567bc3788b84ce0342cc10672c0df26724cc9eafdd915497e4cf0f
SSDEEP 3072:IvD5qZz/Ormi/doxFVub0bX5bjVbwjcC4yafQJWzvX2obZfqb:IVqhOq0WGb0bX5lwjT4LwWzfrfq
TLSH
T1BAD3A062B2E180F6C69B113D6969E73F577FFA3540A0ACC763D11E8A2972942DA25303
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

73274

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime WaitForSingleObject ReleaseMutex CloseHandle SetEvent DuplicateHandle GetQueuedCompletionStatus LocalReAlloc WaitForSingleObjectEx lstrcmpW lstrlenA VirtualAlloc InterlockedDecrement InterlockedIncrement GetTickCount LoadLibraryW GetProcAddress DisableThreadLibraryCalls GetCommandLineA GetCurrentProcessId InterlockedExchange Sleep InterlockedCompareExchange TerminateProcess GetCurrentProcess UnhandledExceptionFilter lstrcatW lstrcpyW lstrlenW SetUnhandledExceptionFilter LocalFree LocalAlloc VirtualProtect SwitchToThread RtlUnwind GetVersion ExitProcess GetModuleHandleA GetModuleFileNameA GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree HeapFree SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW WriteFile HeapAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP LoadLibraryA MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

advapi32

CryptHashData RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW RegDeleteValueW RegSetValueExW RegCloseKey RegOpenKeyExW CryptReleaseContext CryptAcquireContextW CryptAcquireContextA CryptDestroyHash CryptSetHashParam CryptCreateHash CryptDestroyKey RegisterEventSourceW RegCreateKeyExW RegQueryValueExW RegCreateKeyExA CryptImportKey CryptSignHashA CryptGenKey CryptExportKey CryptContextAddRef CryptVerifySignatureA ReportEventW

Sharing