jaffacakes118_HDClone Professional Edition v[.]4[.]0[.]5[.]Retail_setup[.]exe_ yEnc (1_37)

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HDClone Professional Edition v.4.0.5.Retail_setup.exe_ yEnc (1_37)
Size 13.4MB
Sample260910-d26pcawcjc
SHA256 e711beb5e2b76afc898b58d49a18a2b7ab6bc115da35082da0413a549e04c3c6
MD5 730e1a0e589f9d3abbecc01819d3c330
SHA1 94541b767fac038a3fdf49c6810efcb73e8fd57c
SHA512 9a5c980a1ee657f024b7fde628143b7f60759888f78e6cc5c22cd66bfe8572a0f1a6523a9b6f0a4568fc2ec26bce1165a4693e318da5b66880301806a18b888d
SSDEEP 393216:NvENvirCPaRM4M0onqAERNYMYz4iC6BnKioeM:NvivirCPatM0onFGNYDz4iC65N
TLSH
T12EE623ABE1EC0DD9D0A0A6F2D337E03116A32C4CACB4C9AFB0C5BF9B75725885667151
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HDClone Professional Edition v.4.0.5.Retail_setup.exe_ yEnc (1_37)

File Explorer

jaffacakes118_HDClone Professional Edition v.4.0.5.Retail_setup.exe_ yEnc (1_37)

.exe 13.4MB

jaffacakes118_HDClone Professional Edition v.4.0.5.Retail_setup.exe_ yEnc (1_37)

IMPHASH 0ebb3c09b06b1666d307952e824c8697
SHA256 e711beb5e2b76afc898b58d49a18a2b7ab6bc115da35082da0413a549e04c3c6
MD5 730e1a0e589f9d3abbecc01819d3c330
SHA1 94541b767fac038a3fdf49c6810efcb73e8fd57c
SHA512 9a5c980a1ee657f024b7fde628143b7f60759888f78e6cc5c22cd66bfe8572a0f1a6523a9b6f0a4568fc2ec26bce1165a4693e318da5b66880301806a18b888d
SSDEEP 393216:NvENvirCPaRM4M0onqAERNYMYz4iC6BnKioeM:NvivirCPatM0onFGNYDz4iC65N
TLSH
T12EE623ABE1EC0DD9D0A0A6F2D337E03116A32C4CACB4C9AFB0C5BF9B75725885667151
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25692

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

wextract.pdb

advapi32

FreeSid AllocateAndInitializeSid EqualSid GetTokenInformation OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA RegCloseKey RegDeleteValueA RegOpenKeyExA RegSetValueExA RegQueryValueExA RegCreateKeyExA RegQueryInfoKeyA

kernel32

LocalFree LocalAlloc GetLastError GetCurrentProcess lstrlenA GetModuleFileNameA GetSystemDirectoryA _lclose _llseek _lopen WritePrivateProfileStringA GetWindowsDirectoryA CreateDirectoryA GetFileAttributesA ExpandEnvironmentStringsA lstrcpyA GlobalFree GlobalUnlock GlobalLock GlobalAlloc IsDBCSLeadByte GetShortPathNameA GetPrivateProfileStringA GetPrivateProfileIntA lstrcmpiA RemoveDirectoryA FindClose FindNextFileA DeleteFileA SetFileAttributesA lstrcmpA FindFirstFileA FreeResource GetProcAddress LoadResource SizeofResource FindResourceA lstrcatA CloseHandle WriteFile SetFilePointer SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime SetCurrentDirectoryA GetTempFileNameA ExitProcess CreateFileA LoadLibraryExA lstrcpynA GetVolumeInformationA FormatMessageA GetCurrentDirectoryA GetVersionExA GetExitCodeProcess WaitForSingleObject CreateProcessA GetTempPathA GetSystemInfo CreateMutexA SetEvent CreateEventA CreateThread ResetEvent TerminateThread GetDriveTypeA GetModuleHandleA GetStartupInfoA GetCommandLineA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter ReadFile LoadLibraryA GetDiskFreeSpaceA MulDiv EnumResourceLanguagesA FreeLibrary LockResource

gdi32

GetDeviceCaps

user32

ExitWindowsEx wsprintfA CharNextA CharUpperA CharPrevA SetWindowLongA GetWindowLongA CallWindowProcA DispatchMessageA MsgWaitForMultipleObjects PeekMessageA SendMessageA SetWindowPos ReleaseDC GetDC GetWindowRect SendDlgItemMessageA GetDlgItem SetForegroundWindow SetWindowTextA MessageBoxA DialogBoxIndirectParamA ShowWindow EnableWindow GetDlgItemTextA EndDialog GetDesktopWindow MessageBeep SetDlgItemTextA LoadStringA GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA