jaffacakes118_VMware Workstation 8[.]0[.]1[.]exe

General

Target
jaffacakes118_VMware Workstation 8.0.1.exe
Size 4.0MB
Sample260910-es33jaxclf
SHA256 d21a2310859005e3b944e979fc1c12278af5e4444b23a1ad743eb82b9ef10f9b
MD5 cb5067ebb87e9e3d9d5f6df010076e11
SHA1 99aecdbdd8f62be96fd00e364afceba839c628ce
SHA512 579aad57f802b936e328f0c79d0e298d9b465240ef1d53738fa60289f186919e2791317c58c00e0cc91724a1bd9259c7cfac2167e75748082e94509239272e9e
SSDEEP 12288:kVeVQkTrvj47/lKcpRgkhUXz4uodcsGRV8FMLDHsxtQR5iVTjAXI:ksQkTf4DEcpRfhazqnGRCMHMxGy5
TLSH
T12116026031C0C173D47B123245D6CF7A8A39753B57AE96D3F7A91AB92E122C0AA353CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_VMware Workstation 8.0.1.exe

File Explorer

jaffacakes118_VMware Workstation 8.0.1.exe

.exe 4.0MB

jaffacakes118_VMware Workstation 8.0.1.exe

IMPHASH 720f62ecaae027b5c3ec6686644322e9
SHA256 d21a2310859005e3b944e979fc1c12278af5e4444b23a1ad743eb82b9ef10f9b
MD5 cb5067ebb87e9e3d9d5f6df010076e11
SHA1 99aecdbdd8f62be96fd00e364afceba839c628ce
SHA512 579aad57f802b936e328f0c79d0e298d9b465240ef1d53738fa60289f186919e2791317c58c00e0cc91724a1bd9259c7cfac2167e75748082e94509239272e9e
SSDEEP 12288:kVeVQkTrvj47/lKcpRgkhUXz4uodcsGRV8FMLDHsxtQR5iVTjAXI:ksQkTf4DEcpRfhazqnGRCMHMxGy5
TLSH
T12116026031C0C173D47B123245D6CF7A8A39753B57AE96D3F7A91AB92E122C0AA353CD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

65519

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RaiseException GetLastError IsBadReadPtr VirtualProtect GetProcAddress GetModuleHandleA MultiByteToWideChar lstrlenA WideCharToMultiByte lstrlenW GetModuleFileNameW GetModuleFileNameA LoadLibraryA FreeResource SizeofResource LockResource LoadResource FindResourceA Module32Next CloseHandle Module32First CreateToolhelp32Snapshot GetCurrentProcessId CreateFileA CreateFileW GetModuleHandleW VirtualAlloc VirtualFree HeapFree GetProcessHeap FreeLibrary HeapAlloc HeapReAlloc GetCommandLineA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate Sleep ExitProcess WriteFile GetStdHandle HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetConsoleCP GetConsoleMode ReadFile TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement FlushFileBuffers SetFilePointer SetHandleCount GetFileType GetStartupInfoA RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage CompareStringA CompareStringW SetEnvironmentVariableA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile

Sharing