jaffacakes118_Trojan[.]Win32[.]Hesv[.]cgvo[.]f9caea1d93f721fecd9dc8e8fc27cbad

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Hesv.cgvo.f9caea1d93f721fecd9dc8e8fc27cbad
Size 162KB
Sample261018-we853aca47
SHA256 48030d925ca8499d483baeafdc51a2479edf1b7c3a1d150893af96513fe2388f
MD5 f9caea1d93f721fecd9dc8e8fc27cbad
SHA1 ec2725c7a300dc755f18e18be222e00c8638ccb4
SHA512 efeb22614a99365346094fcf78148367ee8df82e35902a97abbe7152b838dc2211e5a4ca697f724e5cb8561e9042db001bb98571762f13e961c8043de8c956c2
SSDEEP 1536:eLUBZ37C+sASQIPdhf9VUk5LWuAxi8EcmrwfItmLZPnI53bQVgd54vEC:KUBZ36A3AhfmuJewyPnAbL7PC
TLSH
T185F33B037267A0F4E828D436191B31F657DA6C315E0EAD15B3687F3B39711E4AE0AB27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Hesv.cgvo.f9caea1d93f721fecd9dc8e8fc27cbad

File Explorer

jaffacakes118_Trojan.Win32.Hesv.cgvo.f9caea1d93f721fecd9dc8e8fc27cbad

.exe 162KB

jaffacakes118_Trojan.Win32.Hesv.cgvo.f9caea1d93f721fecd9dc8e8fc27cbad

IMPHASH 50610e34092d6ce13e51e7c9d5197081
SHA256 48030d925ca8499d483baeafdc51a2479edf1b7c3a1d150893af96513fe2388f
MD5 f9caea1d93f721fecd9dc8e8fc27cbad
SHA1 ec2725c7a300dc755f18e18be222e00c8638ccb4
SHA512 efeb22614a99365346094fcf78148367ee8df82e35902a97abbe7152b838dc2211e5a4ca697f724e5cb8561e9042db001bb98571762f13e961c8043de8c956c2
SSDEEP 1536:eLUBZ37C+sASQIPdhf9VUk5LWuAxi8EcmrwfItmLZPnI53bQVgd54vEC:KUBZ36A3AhfmuJewyPnAbL7PC
TLSH
T185F33B037267A0F4E828D436191B31F657DA6C315E0EAD15B3687F3B39711E4AE0AB27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42968

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

comctl32

ord17

kernel32

DeleteFileA DeleteFileW CreateDirectoryA CreateDirectoryW FindClose FindNextFileA FindFirstFileA FindNextFileW FindFirstFileW GetTickCount WideCharToMultiByte MultiByteToWideChar GetVersionExA GlobalAlloc lstrlenA GetModuleFileNameA FindResourceA GetModuleHandleA HeapAlloc GetProcessHeap HeapFree HeapReAlloc CompareStringA ExitProcess GetLocaleInfoA GetNumberFormatA GetProcAddress DosDateTimeToFileTime GetDateFormatA GetTimeFormatA FileTimeToSystemTime FileTimeToLocalFileTime ExpandEnvironmentStringsA WaitForSingleObject SetCurrentDirectoryA Sleep GetTempPathA MoveFileExA GetModuleFileNameW SetEnvironmentVariableA GetCommandLineA LocalFileTimeToFileTime SystemTimeToFileTime GetSystemTime IsDBCSLeadByte GetCPInfo FreeLibrary LoadLibraryA GetCurrentDirectoryA GetFullPathNameA SetFileAttributesW SetFileAttributesA GetFileAttributesW GetFileAttributesA WriteFile GetStdHandle ReadFile SetLastError CreateFileW CreateFileA GetFileType SetEndOfFile SetFilePointer MoveFileA SetFileTime GetCurrentProcess CloseHandle GetLastError lstrcmpiA

user32

ReleaseDC GetDC SendMessageA wsprintfA SetDlgItemTextA EndDialog DestroyIcon SendDlgItemMessageA GetDlgItemTextA DialogBoxParamA IsWindowVisible WaitForInputIdle GetSysColor PostMessageA SetMenu SetFocus LoadBitmapA LoadIconA CharToOemA OemToCharA GetClassNameA CharUpperA GetWindowRect GetParent MapWindowPoints CreateWindowExA UpdateWindow SetWindowTextA LoadCursorA RegisterClassExA SetWindowLongA GetWindowLongA DefWindowProcA PeekMessageA GetMessageA DispatchMessageA DestroyWindow GetClientRect CopyRect IsWindow MessageBoxA ShowWindow GetDlgItem EnableWindow FindWindowExA wvsprintfA CharToOemBuffA LoadStringA SetWindowPos GetWindowTextA GetWindow GetSystemMetrics OemToCharBuffA TranslateMessage

gdi32

GetDeviceCaps GetObjectA CreateCompatibleBitmap SelectObject StretchBlt CreateCompatibleDC DeleteObject DeleteDC

comdlg32

GetSaveFileNameA CommDlgExtendedError GetOpenFileNameA

advapi32

LookupPrivilegeValueA RegOpenKeyExA RegQueryValueExA RegCreateKeyExA RegSetValueExA RegCloseKey SetFileSecurityW SetFileSecurityA OpenProcessToken AdjustTokenPrivileges

shell32

ShellExecuteExA SHFileOperationA SHGetFileInfoA SHGetSpecialFolderLocation SHGetMalloc SHBrowseForFolderA SHGetPathFromIDListA SHChangeNotify

ole32

CreateStreamOnHGlobal OleInitialize CoCreateInstance OleUninitialize CLSIDFromString

oleaut32

VariantInit