jaffacakes118_profapi[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_profapi.dll
Size 52KB
Sample260910-ckvebacp2w
SHA256 0f5c40ef611d46423fa824c0bff2bed0f4bff2461905a0e758c38080555a26a5
MD5 9f1f2e847e78487d914a144e25692368
SHA1 b61fb260c9b2c1be8fe05a1861766d72183c7dd1
SHA512 2a800304eea8ef5fd211fe8afebd67b951c543b21a57ab96657af68df76048c5140836c51199b26192d1935b1c9171b5066c535f2b0b56fb5ae82daec8fe1a93
SSDEEP 768:RKpx27/ddjS8n1lPgtjNhr8FikyFD6wQ/rSGZl3eSqBm+3:RKedjrCN3B6wtylqBm+
TLSH
T16033D735D8AAE13FC25A8874D9071D09CE72FCCE8690B6CBE3C05CEE1D95B606B2C585
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_profapi.dll

File Explorer

jaffacakes118_profapi.dll

.dll 52KB

jaffacakes118_profapi.dll

IMPHASH 8036c7e42b34fa7c5c392887f067f4fc
SHA256 0f5c40ef611d46423fa824c0bff2bed0f4bff2461905a0e758c38080555a26a5
MD5 9f1f2e847e78487d914a144e25692368
SHA1 b61fb260c9b2c1be8fe05a1861766d72183c7dd1
SHA512 2a800304eea8ef5fd211fe8afebd67b951c543b21a57ab96657af68df76048c5140836c51199b26192d1935b1c9171b5066c535f2b0b56fb5ae82daec8fe1a93
SSDEEP 768:RKpx27/ddjS8n1lPgtjNhr8FikyFD6wQ/rSGZl3eSqBm+3:RKedjrCN3B6wtylqBm+
TLSH
T16033D735D8AAE13FC25A8874D9071D09CE72FCCE8690B6CBE3C05CEE1D95B606B2C585
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32308

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

crypt32

CryptStringToBinaryA

kernel32

CreateThread GetProcAddress CreateProcessA RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ?good@ios_base@std@@QEBA_NXZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xout_of_range@std@@YAXPEBD@Z ?_Random_device@std@@YAIXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

wininet

InternetCheckConnectionW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException __C_specific_handler memset memcmp __std_terminate __std_exception_copy __std_exception_destroy __std_type_info_destroy_list memcpy memmove

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _execute_onexit_table _configure_narrow_argv _seh_filter_dll _initterm_e _initialize_narrow_environment _cexit _invoke_watson _initterm _register_onexit_function _crt_atexit

api-ms-win-crt-string-l1-1-0

isspace