jaffacakes118_[DL] Top[.]Rated[.]Software[.]September[.]20[.]2008[.]Pack-DLFT [.]exe

General

Target
jaffacakes118_[DL] Top.Rated.Software.September.20.2008.Pack-DLFT .exe
Size 485KB
Sample260910-ct7e8stflg
SHA256 aa342f0e7ba9367b30f974387486817e1ed532d0bc9c64a86c3fd2763d67f80b
MD5 9fcea0bc6a2defb00a6b3e4144e18d1c
SHA1 3860b67c633c3205dc827a5ecd343582b3b3676a
SHA512 05e7a2fb1cea81e0695b4830378002699c82629b4e3adf38609f6472fd1259176938d530dff4de1513cc2599beedb50ace99d0d4a3ca23859af6b57b3c8e4159
SSDEEP 12288:1AHm8hzQOKdrCP75X6m0Xd/gC0r7aOoEU8emji:eQ9dGPtX6m0XdId7HN
TLSH
T11EB4CFE13CC0AABBDA5241F14D58CA509252FC7EDF0729C737BE3FC586392EA4521A52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_[DL] Top.Rated.Software.September.20.2008.Pack-DLFT .exe

File Explorer

jaffacakes118_[DL] Top.Rated.Software.September.20.2008.Pack-DLFT .exe

.exe 485KB

jaffacakes118_[DL] Top.Rated.Software.September.20.2008.Pack-DLFT .exe

IMPHASH f34e00900abb6883bad483c926f1e154
SHA256 aa342f0e7ba9367b30f974387486817e1ed532d0bc9c64a86c3fd2763d67f80b
MD5 9fcea0bc6a2defb00a6b3e4144e18d1c
SHA1 3860b67c633c3205dc827a5ecd343582b3b3676a
SHA512 05e7a2fb1cea81e0695b4830378002699c82629b4e3adf38609f6472fd1259176938d530dff4de1513cc2599beedb50ace99d0d4a3ca23859af6b57b3c8e4159
SSDEEP 12288:1AHm8hzQOKdrCP75X6m0Xd/gC0r7aOoEU8emji:eQ9dGPtX6m0XdId7HN
TLSH
T11EB4CFE13CC0AABBDA5241F14D58CA509252FC7EDF0729C737BE3FC586392EA4521A52
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

38269

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcess GetProcAddress GetModuleHandleA lstrlenA WriteFile GetCurrentDirectoryA GetTempPathA lstrcpyA ReadProcessMemory GetModuleFileNameA GetEnvironmentVariableA GetShortPathNameA LoadLibraryA Sleep GetWindowsDirectoryA ExitProcess GetSystemDirectoryA lstrcatA CreateFileA ReadFile CloseHandle InterlockedIncrement InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree DeleteFileA RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException HeapAlloc GetCommandLineA GetVersionExA GetProcessHeap GetStartupInfoA LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle GetLocaleInfoW CreateFileW SetEndOfFile

user32

wsprintfA

advapi32

RegCreateKeyExA RegSetValueExA RegCloseKey RegOpenKeyExA RegDeleteKeyA

Sharing