jaffacakes118_adobe creative suite 3 master collection AngelEye Working at 24th November[.]exe

General

Target
jaffacakes118_adobe creative suite 3 master collection AngelEye Working at 24th November.exe
Size 428KB
Sample260910-cvhs9sef75
SHA256 ccb90484fb60bafb99f9f8cd65b288a32d2891752c30f657d6c42aeee4fde07d
MD5 bad7bb80c0fc82d99ea7c6951da3cb80
SHA1 069fe4b707bf9e277084b8db6fd60ca738cd5db8
SHA512 909e9957736eb85b5611597c4cc9a929aec84d28081a195895fa20ce5784334ee8e4f161cba10063038a746bcf4ca6a872f6341f9405475625795d6e0146e725
SSDEEP 6144:OPylBjgAcSD3Dty9ZCOfVavfqfS5cNIdVQXcacVZWfiIblQlHBxaeJofgz:iyHghSDTtyu2Ivz5cN8zdAfiOlcae2Yz
TLSH
T13E940219B85ACC22EC15407B059AA6C5AF6D3D633AA30463FB4D394ED2FC3D44A39335
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_adobe creative suite 3 master collection AngelEye Working at 24th November.exe

File Explorer

jaffacakes118_adobe creative suite 3 master collection AngelEye Working at 24th November.exe

.exe 428KB

jaffacakes118_adobe creative suite 3 master collection AngelEye Working at 24th November.exe

IMPHASH e4b818d7685dbd64e6088d3044cb53da
SHA256 ccb90484fb60bafb99f9f8cd65b288a32d2891752c30f657d6c42aeee4fde07d
MD5 bad7bb80c0fc82d99ea7c6951da3cb80
SHA1 069fe4b707bf9e277084b8db6fd60ca738cd5db8
SHA512 909e9957736eb85b5611597c4cc9a929aec84d28081a195895fa20ce5784334ee8e4f161cba10063038a746bcf4ca6a872f6341f9405475625795d6e0146e725
SSDEEP 6144:OPylBjgAcSD3Dty9ZCOfVavfqfS5cNIdVQXcacVZWfiIblQlHBxaeJofgz:iyHghSDTtyu2Ivz5cN8zdAfiOlcae2Yz
TLSH
T13E940219B85ACC22EC15407B059AA6C5AF6D3D633AA30463FB4D394ED2FC3D44A39335
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14564

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexA GetCurrentProcess lstrcatA lstrcpyA Sleep FreeLibrary SizeofResource LoadResource FindResourceA GetModuleHandleA CloseHandle WriteFile GetLastError GetModuleFileNameA GetSystemDirectoryA ExitProcess lstrcmpA ReadProcessMemory ReadFile GetFileSize FindNextFileA FindFirstFileA LoadLibraryA GetProcAddress CreateFileA lstrlenA DeleteFileA GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc RtlUnwind HeapSize MultiByteToWideChar GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

wsprintfA

advapi32

RegOpenKeyExA GetUserNameA RegCloseKey

shell32

SHGetFolderPathA

Sharing