jaffacakes118_The Chosen One 2010[.]exe

General

Target
jaffacakes118_The Chosen One 2010.exe
Size 384KB
Sample260910-et59aaxcpa
SHA256 3c2b22339905956786f66719f0725c66db83c7e448d1a60b5ab003770554980e
MD5 f2591def8b69fc59e5d1976cbd88dcf3
SHA1 382f0a7e56f0426b06dd1a4245c404544dfbf1af
SHA512 3e957e1a01a4be5f7bf3806d9e0c27eac03cdb4bd25a6655b64415e85f24c8a89e7a924314e8f55c4333f094982cb1d845513e1f1d9f84f76f93c202402e3c21
SSDEEP 6144:VudhX14Li/dVj/x2yQR/0dj4awh8hcNW++GMwKUs6:VudhFiC3MtOdjt4FNW5ZUP
TLSH
T18484011834D4C033D423B17785A6CBB66EABB8A526662D9F6FC90B748F15BE0D31134E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_The Chosen One 2010.exe

File Explorer

jaffacakes118_The Chosen One 2010.exe

.exe 384KB

jaffacakes118_The Chosen One 2010.exe

IMPHASH 75f652e9bd26cd0127635455c6523162
SHA256 3c2b22339905956786f66719f0725c66db83c7e448d1a60b5ab003770554980e
MD5 f2591def8b69fc59e5d1976cbd88dcf3
SHA1 382f0a7e56f0426b06dd1a4245c404544dfbf1af
SHA512 3e957e1a01a4be5f7bf3806d9e0c27eac03cdb4bd25a6655b64415e85f24c8a89e7a924314e8f55c4333f094982cb1d845513e1f1d9f84f76f93c202402e3c21
SSDEEP 6144:VudhX14Li/dVj/x2yQR/0dj4awh8hcNW++GMwKUs6:VudhFiC3MtOdjt4FNW5ZUP
TLSH
T18484011834D4C033D423B17785A6CBB66EABB8A526662D9F6FC90B748F15BE0D31134E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7692

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlUnwind GetCommandLineA GetStartupInfoA GetLastError HeapFree HeapAlloc RaiseException GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection FatalAppExitA EnterCriticalSection VirtualAlloc HeapReAlloc HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetLocaleInfoW GetTimeZoneInformation CompareStringA CompareStringW SetEnvironmentVariableA

Name

.text

Size

97KB

Virtual Size

97KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

238KB

Virtual Size

238KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_The Chosen One 2010.exe

kernel32

generic