jaffacakes118_DLPO[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_DLPO.exe
Size 60KB
Sample260910-ffwclaybne
SHA256 4c0081eaa38eb6e4facdef3fd2d6b195ad53f1a5b10eef6bbf962a8cea8c916a
MD5 515e05278293b67a06629eba421f6e8a
SHA1 b0dd1ff0cce4efbffada66b35094b0d039e90c72
SHA512 9bcad9687141271135ab0e32ae4cae3419f6412727c6733f62e5336105479dca8906bcac8f3f3ea76889025e477ba549fa6dc3cd274dab5ca680629a4b31bc9a
SSDEEP 384:GtwVLZdtvleeT8ykL0qhJIJw4n2jjE1gmwSoG1KjvvqyfJ10/QfBXyl/PQ9Z5C:GOLZdyyi0/7DkDjJ1rBiZPQ9
TLSH
T15E53C75A7B9570FBD5B6C03E8AD62335B6B070B013224BCB500849796F62AF83D7D788
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_DLPO.exe

File Explorer

jaffacakes118_DLPO.exe

.exe 60KB

jaffacakes118_DLPO.exe

IMPHASH 04ec74b53750063212aa61296042395d
SHA256 4c0081eaa38eb6e4facdef3fd2d6b195ad53f1a5b10eef6bbf962a8cea8c916a
MD5 515e05278293b67a06629eba421f6e8a
SHA1 b0dd1ff0cce4efbffada66b35094b0d039e90c72
SHA512 9bcad9687141271135ab0e32ae4cae3419f6412727c6733f62e5336105479dca8906bcac8f3f3ea76889025e477ba549fa6dc3cd274dab5ca680629a4b31bc9a
SSDEEP 384:GtwVLZdtvleeT8ykL0qhJIJw4n2jjE1gmwSoG1KjvvqyfJ10/QfBXyl/PQ9Z5C:GOLZdyyi0/7DkDjJ1rBiZPQ9
TLSH
T15E53C75A7B9570FBD5B6C03E8AD62335B6B070B013224BCB500849796F62AF83D7D788
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70242

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\0xhunter\Downloads\ISR\Bypass\DLPO\x64\Debug\DLPO.pdb

vcruntime140d

__vcrt_LoadLibraryExW __vcrt_GetModuleHandleW __vcrt_GetModuleFileNameW __C_specific_handler_noexcept __current_exception_context __current_exception __std_type_info_destroy_list __C_specific_handler memcpy

ucrtbased

terminate strcpy_s strcat_s __stdio_common_vsprintf_s _wmakepath_s _wsplitpath_s wcscpy_s _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table _seh_filter_dll __p__commode _set_new_mode _configthreadlocale _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _set_fmode _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __setusermatherr _set_app_type _seh_filter_exe _CrtDbgReportW _CrtDbgReport system _crt_at_quick_exit

kernel32

GetLastError QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent TerminateProcess GetCurrentProcess GetProcAddress FreeLibrary VirtualQuery GetProcessHeap HeapFree HeapAlloc GetCurrentThreadId WideCharToMultiByte MultiByteToWideChar RaiseException GetModuleHandleW IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

512B

Virtual Size

454B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

607B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_DLPO.exe

vcruntime140d

ucrtbased

kernel32

generic