jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]f7ad73de828dca55868cb6d51bd28cca

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.f7ad73de828dca55868cb6d51bd28cca
Size 324KB
Sample261014-jgqehsfb64
SHA256 d77b179c75287c5c2deb4b97d7885b86367375214680965f8ebe913dace1f06b
MD5 f7ad73de828dca55868cb6d51bd28cca
SHA1 932d880a071a96ae358f25986ed37ade7edc4cb1
SHA512 95d1bbd5c61b3fd7326ebca86164b596b16ad896f2f06c1e62c12dbf12312df7cbb967550f0d61a56f7adbe87802a703564bebd96ad3c6b77248120ba071a0d8
SSDEEP 3072:QCWsQ37XRZkPIJzlMfa3lhhzEdgSbH3HeVCHaoJ5tv9xMy6NxCw55u2sdt:QCq7XUiMfE35E7HjZv9xmxCF2It
TLSH
T14C64AE117BD1C072DA5A147A4826C37A593AB9304F66D6C3BBD11F2EDE203D2EE3534A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.f7ad73de828dca55868cb6d51bd28cca

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.f7ad73de828dca55868cb6d51bd28cca

.exe 324KB

jaffacakes118_HEUR.Trojan.Win32.Generic.f7ad73de828dca55868cb6d51bd28cca

IMPHASH 564209f8248ad69a7e51521336dc2d5e
SHA256 d77b179c75287c5c2deb4b97d7885b86367375214680965f8ebe913dace1f06b
MD5 f7ad73de828dca55868cb6d51bd28cca
SHA1 932d880a071a96ae358f25986ed37ade7edc4cb1
SHA512 95d1bbd5c61b3fd7326ebca86164b596b16ad896f2f06c1e62c12dbf12312df7cbb967550f0d61a56f7adbe87802a703564bebd96ad3c6b77248120ba071a0d8
SSDEEP 3072:QCWsQ37XRZkPIJzlMfa3lhhzEdgSbH3HeVCHaoJ5tv9xMy6NxCw55u2sdt:QCq7XUiMfE35E7HjZv9xmxCF2It
TLSH
T14C64AE117BD1C072DA5A147A4826C37A593AB9304F66D6C3BBD11F2EDE203D2EE3534A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

113135

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\Users\Tracer\Documents\Source\Visual Studio Projects VS2002\Spy-2004\RemoteSpy-Database\Release\RemoteSpy.pdb

iphlpapi

GetAdaptersInfo

wininet

InternetGetConnectedState

shlwapi

StrStrIA

ws2_32

WSACleanup

oleacc

AccessibleObjectFromWindow ObjectFromLresult

kernel32

lstrlenW GetLastError WritePrivateProfileStringA SetFileAttributesA GetVersionExA CloseHandle OpenProcess WriteFile lstrlenA CreateFileA lstrcatA lstrcpyA FindClose FindFirstFileA GetFileAttributesA DeleteFileA FindNextFileA RemoveDirectoryA GetComputerNameA CreateDirectoryA GetPrivateProfileStringA lstrcpynA GetLocalTime LeaveCriticalSection EnterCriticalSection ExpandEnvironmentStringsA CreateProcessA TerminateProcess HeapFree GetProcessHeap WideCharToMultiByte MultiByteToWideChar SetErrorMode WaitForMultipleObjects GetProcAddress LoadLibraryA FreeLibrary GetCurrentProcessId HeapAlloc FormatMessageA InterlockedDecrement GetFullPathNameA DeleteCriticalSection InitializeCriticalSection GlobalUnlock GlobalLock lstrcmpiA GetModuleHandleA GlobalAddAtomA ReleaseMutex CopyFileA GetSystemDirectoryA GetCommandLineA GetCommandLineW CreateMutexA GetTickCount SetEndOfFile CreateFileW GetLocaleInfoW SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA GetLocaleInfoA GetSystemTimeAsFileTime QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA InitializeCriticalSectionAndSpinCount HeapSize IsValidCodePage GetOEMCP GetACP SetFilePointer ReadFile FlushFileBuffers GetConsoleMode GetConsoleCP GetFileType GetStdHandle SetHandleCount HeapReAlloc VirtualAlloc VirtualFree HeapCreate GetCurrentThreadId SetLastError TlsFree TlsSetValue RtlUnwind TlsAlloc TlsGetValue GetCPInfo LCMapStringW LCMapStringA GetStartupInfoA ExitProcess GetModuleHandleW CreateThread ResumeThread ExitThread Sleep FindResourceA LoadResource LockResource SizeofResource GetModuleFileNameA RaiseException IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess InterlockedExchange InterlockedIncrement

user32

MessageBoxA GetWindowRect SetWindowPos GetDlgItem LoadCursorA RegisterClassA CreateWindowExA GetMessageA LoadMenuA GetSubMenu DestroyMenu PostQuitMessage DialogBoxParamA GetCursorPos TrackPopupMenu DefWindowProcA RegisterHotKey PostMessageA GetTopWindow GetDesktopWindow GetDC ReleaseDC GetKeyState MapVirtualKeyA IsClipboardFormatAvailable OpenClipboard GetClipboardData EmptyClipboard CloseClipboard GetParent SetForegroundWindow GetActiveWindow GetForegroundWindow FindWindowA EnumChildWindows IsWindow SendMessageTimeoutA RegisterWindowMessageA UnregisterHotKey IsWindowVisible FindWindowExA GetClassNameA EnumWindows wsprintfA SendDlgItemMessageA LoadIconA SetTimer DestroyWindow EndDialog KillTimer MoveWindow ShowWindow GetWindowLongA GetWindowThreadProcessId SendMessageA PeekMessageA DispatchMessageA TranslateMessage GetSystemMetrics

gdi32

DeleteDC GetStockObject CreateDCA CreateCompatibleDC CreateCompatibleBitmap SelectObject BitBlt DeleteObject

advapi32

GetUserNameA RegQueryValueExA RegOpenKeyExA RegSetValueExA RegDeleteValueA RegCloseKey

shell32

SHGetFolderPathA CommandLineToArgvW Shell_NotifyIconA ShellExecuteA

ole32

CoInitialize CoUninitialize CoTaskMemAlloc CoTaskMemFree CoCreateInstance

oleaut32

GetErrorInfo SysStringByteLen SysStringLen SysFreeString SysAllocStringLen VariantInit VariantClear VariantCopy SysAllocStringByteLen