jaffacakes118__d353b03ef0efcbe74862a81c96faa59a

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__d353b03ef0efcbe74862a81c96faa59a
Size 460KB
Sample260917-3xt77a1erg
SHA256 04e9582351c1d2dd9cd882cecbe335241d8df8dda5febdfd37c902ab0166f418
MD5 d353b03ef0efcbe74862a81c96faa59a
SHA1 527c373c57a5221b9331bbd05469280d38bb1259
SHA512 e42b4723abd85ad9b0c3e1820c66c91063a373f19cc677bb52228b47421d160b6131dbdce7042a23a93db5a04d9c0345ec6eb7c449e667945a47cdff3367538b
SSDEEP 6144:qIziJl3JAe+qLuRaLk6xmBSEymII9Hsa1R4Eqw51anMEaNspe0PHIbqI2M13Frjy:qvJlZAe+qzBxmn9MSxqSJEaEdM11bF
TLSH
T18EA4227EAE2F942EF060C6B1E590604EF1144A727B2510DFE416895F07643C6BFBAB36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__d353b03ef0efcbe74862a81c96faa59a

File Explorer

jaffacakes118__d353b03ef0efcbe74862a81c96faa59a

.exe 460KB

jaffacakes118__d353b03ef0efcbe74862a81c96faa59a

IMPHASH 1ec4d2a7f82d47b79984147bb730e918
SHA256 04e9582351c1d2dd9cd882cecbe335241d8df8dda5febdfd37c902ab0166f418
MD5 d353b03ef0efcbe74862a81c96faa59a
SHA1 527c373c57a5221b9331bbd05469280d38bb1259
SHA512 e42b4723abd85ad9b0c3e1820c66c91063a373f19cc677bb52228b47421d160b6131dbdce7042a23a93db5a04d9c0345ec6eb7c449e667945a47cdff3367538b
SSDEEP 6144:qIziJl3JAe+qLuRaLk6xmBSEymII9Hsa1R4Eqw51anMEaNspe0PHIbqI2M13Frjy:qvJlZAe+qzBxmn9MSxqSJEaEdM11bF
TLSH
T18EA4227EAE2F942EF060C6B1E590604EF1144A727B2510DFE416895F07643C6BFBAB36
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42u

ord2377 ord5157 ord6370 ord4347 ord5276 ord3793 ord4831 ord4435 ord2640 ord2047 ord6372 ord3744 ord5059 ord1720 ord5257 ord2438 ord2116 ord5273 ord2977 ord3142 ord3254 ord4459 ord3131 ord3257 ord2980 ord3076 ord2971 ord3825 ord3826 ord3820 ord3074 ord4075 ord4621 ord4419 ord3592 ord324 ord6195 ord940 ord755 ord858 ord6168 ord5785 ord5871 ord470 ord4704 ord641 ord3087 ord3356 ord2637 ord3093 ord6193 ord5977 ord2578 ord6051 ord1768 ord4399 ord5286 ord3397 ord4418 ord3718 ord567 ord797 ord2110 ord5783 ord5237 ord2858 ord2567 ord4390 ord3569 ord609 ord6211 ord2634 ord6371 ord4480 ord2546 ord2504 ord5727 ord3917 ord1089 ord5193 ord2388 ord3341 ord5296 ord5298 ord2717 ord4074 ord4692 ord5303 ord5285 ord5710 ord3396 ord4616 ord3733 ord561 ord815 ord4237 ord2715 ord2382 ord3054 ord5094 ord5097 ord4461 ord4298 ord3345 ord5006 ord975 ord5468 ord3398 ord2874 ord2873 ord4146 ord4072 ord5233 ord5278 ord2641 ord1658 ord4430 ord5248 ord4421 ord3618 ord674 ord2084 ord4140 ord366 ord2070 ord4219 ord538 ord860 ord4401 ord1767 ord1569 ord4073 ord6048 ord2506 ord4992 ord4847 ord4370 ord5261 ord4229 ord2859 ord3133 ord1165 ord537 ord922 ord823 ord2606 ord535 ord2910 ord5568 ord540 ord861 ord4155 ord289 ord613 ord800 ord3614 ord5782 ord2442 ord825 ord323 ord2397 ord640 ord5781 ord1633 ord3701 ord1634 ord3566 ord2406 ord3621 ord3568 ord3658

msvcrt

rand qsort _errno _c_exit _exit _XcptFilter _cexit exit _wcmdln __wgetmainargs time __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type ??1type_info@@UAE@XZ __dllonexit _onexit ?terminate@@YAXXZ _controlfp _except_handler3 srand _initterm _wtoi wcscmp _purecall __CxxFrameHandler

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey RegCreateKeyW RegQueryValueExW RegSetValueExW RegFlushKey RegDeleteValueW

kernel32

lstrcpyW GetStartupInfoW GetModuleHandleA lstrcmpiW FindResourceW LoadResource LockResource SetErrorMode lstrlenW FreeLibrary LoadLibraryW GetProcAddress LoadLibraryA WinExec

gdi32

CombineRgn GetTextExtentPoint32W GetTextMetricsW GetDeviceCaps CreateSolidBrush UnrealizeObject PatBlt CreateFontW SetLayout SetPixel GetPixel BitBlt CreateCompatibleBitmap CreateRectRgn SetRectRgn CreateICW CreateCompatibleDC

user32

MessageBeep DdeGetLastError IntersectRect SystemParametersInfoW GetSystemMetrics GetDesktopWindow UpdateWindow GetMenu EnableMenuItem CheckMenuItem FillRect KillTimer GetProcessDefaultLayout SetTimer InvalidateRect LoadIconW wsprintfW EnableWindow SendMessageW GetParent ClientToScreen GetClientRect SetRect PostMessageW DdeCreateDataHandle DdeCreateStringHandleW DdeFreeStringHandle DdeGetData DdeInitializeW DdePostAdvise DdeClientTransaction DdeUninitialize DdeNameService DdeConnect DdeDisconnect DrawIcon DrawTextW GetWindowRect

shell32

ShellAboutW

winmm

waveOutGetNumDevs sndPlaySoundW

Name

.text

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fhj5

Size

512B

Virtual Size

196B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fhj50

Size

512B

Virtual Size

222B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fhj51

Size

512B

Virtual Size

228B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fhj52

Size

208KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fhj53

Size

208KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fhj54

Size

512B

Virtual Size

212B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fhj55

Size

512B

Virtual Size

214B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fhj56

Size

512B

Virtual Size

216B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fhj57

Size

512B

Virtual Size

214B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fhj58

Size

512B

Virtual Size

212B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fhj59

Size

512B

Virtual Size

212B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.1231

Size

512B

Virtual Size

214B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.JAKS

Size

512B

Virtual Size

246B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.GAHS

Size

512B

Virtual Size

198B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.HAJS

Size

512B

Virtual Size

458B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.HnJS

Size

512B

Virtual Size

168B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.SKALS

Size

512B

Virtual Size

242B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.SKAkS

Size

512B

Virtual Size

260B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.SfAkS

Size

512B

Virtual Size

260B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.8AUqj

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

328B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__d353b03ef0efcbe74862a81c96faa59a

mfc42u

msvcrt

advapi32

kernel32

gdi32

user32

shell32

winmm

generic