jaffacakes118_Trojan[.]Win32[.]Obfuscated[.]gen[.]949b50a96f93a33154a1651ab0511840

General

Target
jaffacakes118_Trojan.Win32.Obfuscated.gen.949b50a96f93a33154a1651ab0511840
Size 624KB
Sample261014-mglm4sbw21
SHA256 e4c0763f15930d7fa89a7d6663ac2252e3637b5974b95b8efe91c075862d7a3b
MD5 949b50a96f93a33154a1651ab0511840
SHA1 a397b561ca91748defc51f75d6072815c3911b67
SHA512 8ba63f83aedf4f4fcc125aa07843f3ae85d6de83b08ddd43840193abf41d43fb3a07d74d2f5a3f6418df4b185d7db4132dd5aea95d36d7b6586afc11e77635af
SSDEEP 12288:4asw2XWayZG9kFG1hN/WmoG/XRB40/2331j+JrB62kia2:dswIdyZ/GbN+IfA/lK1Hkia
TLSH
T11CD4014ABED0C27FC4EA25B72C6B87A6F436E904023546573BE81C6BBEC27B06455743
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Obfuscated.gen.949b50a96f93a33154a1651ab0511840

File Explorer

jaffacakes118_Trojan.Win32.Obfuscated.gen.949b50a96f93a33154a1651ab0511840

.exe 624KB

jaffacakes118_Trojan.Win32.Obfuscated.gen.949b50a96f93a33154a1651ab0511840

IMPHASH 0da8068f4f71640878b0c8dd685b5ba8
SHA256 e4c0763f15930d7fa89a7d6663ac2252e3637b5974b95b8efe91c075862d7a3b
MD5 949b50a96f93a33154a1651ab0511840
SHA1 a397b561ca91748defc51f75d6072815c3911b67
SHA512 8ba63f83aedf4f4fcc125aa07843f3ae85d6de83b08ddd43840193abf41d43fb3a07d74d2f5a3f6418df4b185d7db4132dd5aea95d36d7b6586afc11e77635af
SSDEEP 12288:4asw2XWayZG9kFG1hN/WmoG/XRB40/2331j+JrB62kia2:dswIdyZ/GbN+IfA/lK1Hkia
TLSH
T11CD4014ABED0C27FC4EA25B72C6B87A6F436E904023546573BE81C6BBEC27B06455743
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

140069

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNamedPipeInfo VirtualQueryEx VirtualProtectEx MoveFileA FreeEnvironmentStringsA EnumCalendarInfoExW GetStdHandle GetStringTypeA HeapAlloc CreateMutexA GetCurrentProcessId GetLocaleInfoW HeapCreate SetUnhandledExceptionFilter GetFileAttributesExA GetCurrentThread FreeLibrary InitializeCriticalSection GlobalFlags GetCurrentThreadId OpenMutexA SetConsoleWindowInfo GetUserDefaultLCID EnterCriticalSection GetLocaleInfoA InterlockedIncrement Sleep GetPriorityClass GetEnvironmentStringsA IsValidLocale VirtualQuery DeleteFileW DebugActiveProcess CreateWaitableTimerA CloseHandle WriteConsoleW TerminateProcess LCMapStringW GetConsoleCP GetCurrentDirectoryW GetModuleFileNameW MultiByteToWideChar GetCommandLineA GetDateFormatA GetCPInfo GetProcessHeap QueryPerformanceCounter WaitNamedPipeW TlsAlloc LocalFlags UnmapViewOfFile TerminateThread CreateRemoteThread TlsFree GetFileSize GetFileAttributesA GetTempPathA GlobalGetAtomNameW GetPrivateProfileStructW SetConsoleCursorPosition CreateEventA GetCurrentProcess SetHandleCount SetConsoleCtrlHandler AllocConsole WriteFile HeapSize RtlUnwind SetFileAttributesA FreeEnvironmentStringsW SetLastError GetTimeZoneInformation lstrcmp EnumCalendarInfoW GetPrivateProfileStringW ReleaseSemaphore lstrcat InterlockedDecrement WriteConsoleA LCMapStringA SetFilePointer SetThreadContext ReadFile WideCharToMultiByte lstrcmpi ExitProcess GetConsoleMode LoadLibraryA IsDebuggerPresent GetACP GetProcAddress CompareStringA GetCompressedFileSizeW LocalAlloc HeapDestroy GlobalAddAtomW GetConsoleOutputCP GetFileType UnhandledExceptionFilter GetStartupInfoA SetStdHandle DuplicateHandle GetLongPathNameW GetEnvironmentStrings LockFile InterlockedExchange CreateFileA GetSystemDefaultLCID TlsGetValue DeleteCriticalSection FindAtomW GetStringTypeW GetLocalTime FlushFileBuffers CompareStringW WritePrivateProfileStringA GetLastError SetConsoleCP GetCommandLineW CommConfigDialogA GlobalFix GetCalendarInfoW VirtualFree LeaveCriticalSection GetVolumeInformationW VirtualAlloc GetVersionExA HeapFree GetFileAttributesExW LocalFileTimeToFileTime lstrcatA GetTempFileNameA GetTimeFormatA WriteConsoleOutputW SetEnvironmentVariableA FillConsoleOutputAttribute HeapReAlloc GetSystemTimeAsFileTime GetModuleHandleA GetCompressedFileSizeA WritePrivateProfileStructA lstrcpynW InitializeCriticalSectionAndSpinCount GetEnvironmentStringsW GetWindowsDirectoryA SetThreadAffinityMask GetThreadPriority lstrcmpA GetStartupInfoW EnumSystemLocalesA TlsSetValue GetModuleFileNameA GetOEMCP IsValidCodePage GetUserDefaultLangID GetTickCount

user32

GetTabbedTextExtentW DestroyMenu SendMessageW GetMenuCheckMarkDimensions SetActiveWindow ShowWindow GetClassInfoExW CreateWindowExA SetPropW SendIMEMessageExA SetCapture DdeDisconnectList EnumDisplayDevicesW DdeNameService SendDlgItemMessageA GetSystemMenu SystemParametersInfoW GetTabbedTextExtentA DestroyWindow DrawIcon ExcludeUpdateRgn SetWindowsHookW VkKeyScanExA SetMenuInfo DefWindowProcW DdeInitializeW OemToCharBuffA MessageBoxA GetClassNameW ClipCursor IsDialogMessageW GetLastActivePopup RegisterClassExA EndTask LoadStringW GetKeyboardType LoadStringA RegisterClassA ChangeDisplaySettingsA CascadeChildWindows SetUserObjectSecurity ChangeDisplaySettingsExA LoadBitmapA DdeCreateStringHandleA TrackPopupMenuEx DdeQueryNextServer

comctl32

ImageList_AddIcon GetEffectiveClientRect DrawInsert CreateStatusWindowW InitCommonControlsEx ImageList_Add ImageList_ReplaceIcon ImageList_Replace ImageList_GetImageRect ImageList_Create ImageList_DragShowNolock ImageList_GetIcon ImageList_BeginDrag

Sharing