jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]6d7dcbc500c005cbc0b6091c14c1b47d

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.6d7dcbc500c005cbc0b6091c14c1b47d
Size 264KB
Sample261016-nddnrsdy2m
SHA256 4278c35ca6025fe8345f579afffd4fcff207814a343c474c2be738837476ce1d
MD5 6d7dcbc500c005cbc0b6091c14c1b47d
SHA1 829654556b9c2bb7e53096828cb7902576ad2281
SHA512 557750da590d76b606867f84fc4dc68107a2e96935923a2da0ac72f61fdc8e20fa3a1b6eab7179469dff2e580057ab563ddde7d1503c4b99392933d2c9378afb
SSDEEP 6144:ezpIT9mZ7acEGhFpwTMhxYlNqqogDkbO/SkF/a/0uFR/6q79:ewc7a4hooxDAkbOaMa/0o/z9
TLSH
T19544122236950FB2D02BAD3DC587C93E45B8FCE11243123B6DDC856F7DE3AD648A2691
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.6d7dcbc500c005cbc0b6091c14c1b47d

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.6d7dcbc500c005cbc0b6091c14c1b47d

.exe 264KB

jaffacakes118_HEUR.Trojan.Win32.Generic.6d7dcbc500c005cbc0b6091c14c1b47d

IMPHASH 5493ecdcd746b846d41ba4697387c0be
SHA256 4278c35ca6025fe8345f579afffd4fcff207814a343c474c2be738837476ce1d
MD5 6d7dcbc500c005cbc0b6091c14c1b47d
SHA1 829654556b9c2bb7e53096828cb7902576ad2281
SHA512 557750da590d76b606867f84fc4dc68107a2e96935923a2da0ac72f61fdc8e20fa3a1b6eab7179469dff2e580057ab563ddde7d1503c4b99392933d2c9378afb
SSDEEP 6144:ezpIT9mZ7acEGhFpwTMhxYlNqqogDkbO/SkF/a/0uFR/6q79:ewc7a4hooxDAkbOaMa/0o/z9
TLSH
T19544122236950FB2D02BAD3DC587C93E45B8FCE11243123B6DDC856F7DE3AD648A2691
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9840

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumTimeFormatsA GetSystemDefaultLCID GetLongPathNameW OpenMutexA SetComputerNameW MoveFileA EnumDateFormatsW IsValidLocale SetCurrentDirectoryW GlobalAlloc GetHandleInformation CreateDirectoryW AddAtomA GetExitCodeThread GetExitCodeProcess ReadDirectoryChangesW CreateDirectoryA CreateMailslotW DuplicateHandle SetCalendarInfoW GetWindowsDirectoryA GetSystemDirectoryA GetProcAddress SearchPathA GetSystemInfo GetModuleHandleA ReplaceFileA SetErrorMode GetModuleHandleA FreeLibrary ReplaceFileW GetAtomNameW SetLocaleInfoA SetEvent GetModuleFileNameW WaitForSingleObject lstrlenW TlsAlloc MoveFileW lstrcmpiA OpenWaitableTimerA IsBadCodePtr EnumCalendarInfoW GlobalFindAtomW GetMailslotInfo GetVolumeInformationW lstrcmpA GetExpandedNameW FindAtomW lstrcpy GetStartupInfoW AddAtomW lstrcpyW GetEnvironmentVariableA OpenSemaphoreW lstrcatW LoadResource EnumDateFormatsA GetLogicalDriveStringsA CompareFileTime FindResourceA OpenEventW Beep lstrcpyn GetVersion GetCPInfo GetModuleHandleW FindResourceW GetShortPathNameW GetTempPathA CreateSemaphoreW GetLogicalDrives GetTimeFormatA GetCurrentThreadId

user32

MessageBoxIndirectA LoadCursorA OpenClipboard RemoveMenu MonitorFromPoint keybd_event GetCaretPos CreateDialogParamA MonitorFromWindow GetKeyboardLayout IsMenu CreateDesktopW GetMessageW GetMenuItemInfoW GetClassInfoA CreateWindowExW TrackPopupMenuEx GetClassInfoW DefWindowProcW MessageBoxA DialogBoxParamA SetCursor ShowCursor GetSystemMetrics LoadCursorW CopyIcon LoadImageA GetCapture CreateDesktopA IsIconic LoadMenuA CreateDialogParamW GetMenuItemCount GetDlgItemInt CreateDialogIndirectParamA CharPrevA SetWindowTextW AdjustWindowRect SendMessageW mouse_event GetActiveWindow ShowWindow GetSysColor GetScrollPos GetForegroundWindow GetKeyboardType InsertMenuItemW RegisterWindowMessageA LoadBitmapA PostQuitMessage DialogBoxParamW GetDlgItemTextA SetWindowPos SetWindowTextA wsprintfA DialogBoxIndirectParamW CharNextW WaitMessage CreatePopupMenu MonitorFromRect AppendMenuW wvsprintfW CharPrevW SetTimer DestroyIcon RegisterWindowMessageW SetFocus SetActiveWindow GetCursorPos CheckMenuItem GetFocus ShowCaret EndMenu InvalidateRect SendDlgItemMessageW CreateAcceleratorTableA SetWindowLongW UnregisterClassA GetSubMenu EmptyClipboard

gdi32

GetRasterizerCaps GetStockObject UpdateICMRegKeyW SetMetaFileBitsEx RemoveFontResourceW CreateDIBPatternBrushPt CreateScalableFontResourceW GetTextExtentPointW CreateColorSpaceA CreateFontIndirectW CreateFontW CreatePatternBrush CreatePolygonRgn CreateFontIndirectA GetTextExtentPointA GetMetaFileW SelectBrushLocal CreateBitmap CreateDIBSection UpdateICMRegKeyA CreateCompatibleDC GdiGetBatchLimit CreateEllipticRgn ExtCreateRegion TranslateCharsetInfo CreateICW AddFontResourceA CreateBitmapIndirect CreateRoundRectRgn CreateScalableFontResourceA RemoveFontResourceExW DeleteObject CreateMetaFileA CreateColorSpaceW GetMetaFileA CreateFontA CreateICA

advapi32

OpenEventLogA IdentifyCodeAuthzLevelW SetSecurityDescriptorDacl LsaICLookupSids

version

VerFindFileW VerInstallFileW VerInstallFileA VerLanguageNameW GetFileVersionInfoW GetFileVersionInfoSizeW VerFindFileA VerQueryValueA

mprapi

MprAdminMIBEntryCreate MprAdminInterfaceTransportAdd MprAdminTransportGetInfo MprInfoDuplicate MprDomainQueryRasServer MprConfigServerConnect MprInfoBlockAdd MprConfigBufferFree MprAdminConnectionClearStats MprAdminTransportSetInfo MprDomainRegisterRasServer MprAdminGetErrorString MprConfigTransportEnum MprAdminRegisterConnectionNotification RasPrivilegeAndCallBackNumber MprConfigInterfaceTransportEnum MprAdminInterfaceGetHandle MprConfigTransportGetHandle MprAdminInterfaceGetCredentialsEx MprConfigInterfaceTransportAdd MprAdminMIBServerConnect MprConfigServerInstall MprInfoBlockAdd

crypt32

CryptGetDefaultOIDDllList I_CertUpdateStore I_CryptFindLruEntry CertSerializeCRLStoreElement CryptMsgCountersign CertVerifyCertificateChainPolicy

Name

.text

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

111KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

5KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

6KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

93KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.srgyuO

Size

112KB

Virtual Size

189KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

4KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.6d7dcbc500c005cbc0b6091c14c1b47d

kernel32

user32

gdi32

advapi32

version

mprapi

crypt32

generic