jaffacakes118__2ec2f10cd260ec264ead76049a5d7731

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__2ec2f10cd260ec264ead76049a5d7731
Size 437KB
Sample260919-26f69ayamd
SHA256 9c45254b7c5d46c847ce78a3e43e6648de063b62d73745b153030f0102039557
MD5 2ec2f10cd260ec264ead76049a5d7731
SHA1 2c6f2c4888eb26e79bf6df5f3955e038cf7c31d6
SHA512 fb8fabe6c34a89354c50abecb8c911def49e801ca69f0dcc9dcaa6a6f891bdd7c50a81c2423e87ea2b862752edae98edf506f31c6cf937f788d22ca26b5ef08c
SSDEEP 6144:wKuZqVQwgQkC09Yhi9eBaH+GQvqVi8eHJqmblN1SFqlfG0:NuZgQwvZxd8eGQDHdn4FAf
TLSH
T113947F3AF6D0C937D163293D8C4B86A49C25BE913E2858463BF82D4C5F7D782352A2D7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2ec2f10cd260ec264ead76049a5d7731

File Explorer

jaffacakes118__2ec2f10cd260ec264ead76049a5d7731

.exe 437KB

jaffacakes118__2ec2f10cd260ec264ead76049a5d7731

IMPHASH b44fd8846ee752f0ae7cd2bd232e052e
SHA256 9c45254b7c5d46c847ce78a3e43e6648de063b62d73745b153030f0102039557
MD5 2ec2f10cd260ec264ead76049a5d7731
SHA1 2c6f2c4888eb26e79bf6df5f3955e038cf7c31d6
SHA512 fb8fabe6c34a89354c50abecb8c911def49e801ca69f0dcc9dcaa6a6f891bdd7c50a81c2423e87ea2b862752edae98edf506f31c6cf937f788d22ca26b5ef08c
SSDEEP 6144:wKuZqVQwgQkC09Yhi9eBaH+GQvqVi8eHJqmblN1SFqlfG0:NuZgQwvZxd8eGQDHdn4FAf
TLSH
T113947F3AF6D0C937D163293D8C4B86A49C25BE913E2858463BF82D4C5F7D782352A2D7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

344804

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

kernel32

lstrcpyA WriteFile WinExec WaitForSingleObject VirtualQuery VirtualAlloc TerminateProcess Sleep SizeofResource SetThreadLocale SetFilePointer SetFileAttributesA SetEvent SetErrorMode SetEndOfFile ResetEvent ReleaseMutex ReadFile OpenProcess MulDiv LockResource LoadResource LoadLibraryA LeaveCriticalSection InitializeCriticalSection GlobalUnlock GlobalReAlloc GlobalHandle GlobalLock GlobalFree GlobalFindAtomA GlobalDeleteAtom GlobalAlloc GlobalAddAtomA GetVersionExA GetVersion GetTickCount GetThreadLocale GetSystemInfo GetSystemDirectoryA GetStringTypeExA GetStdHandle GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLocalTime GetLastError GetFullPathNameA GetDiskFreeSpaceA GetDateFormatA GetCurrentThreadId GetCurrentProcessId GetCPInfo GetACP FreeResource InterlockedExchange FreeLibrary FormatMessageA FindResourceA EnumCalendarInfoA EnterCriticalSection DeleteFileA DeleteCriticalSection CreateThread CreateMutexA CreateFileA CreateEventA CopyFileA CompareStringA CloseHandle Sleep TlsSetValue TlsGetValue LocalAlloc GetModuleHandleA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection VirtualFree VirtualAlloc LocalFree LocalAlloc GetVersion GetCurrentThreadId InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenA lstrcpynA LoadLibraryExA GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetCommandLineA FreeLibrary FindFirstFileA FindClose ExitProcess WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey RegSetValueExA RegQueryValueExA RegOpenKeyExA RegOpenKeyA RegFlushKey RegCreateKeyExA RegCloseKey

comctl32

ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_SetDragCursorImage ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Remove ImageList_DrawEx ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_GetImageCount ImageList_Destroy ImageList_Create

gdi32

UnrealizeObject StretchBlt SetWindowOrgEx SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SelectPalette SelectObject SaveDC RestoreDC RectVisible RealizePalette PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetTextMetricsA GetTextExtentPoint32A GetSystemPaletteEntries GetStockObject GetPixel GetPaletteEntries GetObjectA GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits ExcludeClipRect DeleteObject DeleteDC CreateSolidBrush CreatePenIndirect CreatePalette CreateHalftonePalette CreateFontIndirectA CreateDIBitmap CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap BitBlt

oleaut32

SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit SysFreeString SysReAllocStringLen SysAllocStringLen

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHChangeNotify

user32

CreateWindowExA WindowFromPoint WinHelpA WaitMessage UpdateWindow UnregisterClassA UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoA ShowWindow ShowScrollBar ShowOwnedPopups ShowCursor SetWindowsHookExA SetWindowTextA SetWindowPos SetWindowPlacement SetWindowLongA SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropA SetParent SetMenuItemInfoA SetMenu SetForegroundWindow SetFocus SetCursor SetClassLongA SetCapture SetActiveWindow SendMessageA ScrollWindow ScreenToClient RemovePropA RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageA RegisterClipboardFormatA RegisterClassA RedrawWindow PtInRect PostQuitMessage PostMessageA PeekMessageA OffsetRect OemToCharA MessageBoxA MapWindowPoints MapVirtualKeyA LoadStringA LoadKeyboardLayoutA LoadIconA LoadCursorA LoadBitmapA KillTimer IsZoomed IsWindowVisible IsWindowEnabled IsWindow IsRectEmpty IsIconic IsDialogMessageA IsChild InvalidateRect IntersectRect InsertMenuItemA InsertMenuA InflateRect GetWindowThreadProcessId GetWindowTextA GetWindowRect GetWindowPlacement GetWindowLongA GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropA GetParent GetWindow GetMenuStringA GetMenuState GetMenuItemInfoA GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextA GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClientRect GetClassNameA GetClassInfoA GetCapture GetActiveWindow FrameRect FindWindowA FillRect EqualRect EnumWindows EnumThreadWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem DrawTextA DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawEdge DispatchMessageA DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcA DefMDIChildProcA DefFrameProcA CreatePopupMenu CreateMenu CreateIcon ClientToScreen CheckMenuItem CallWindowProcA CallNextHookEx BeginPaint CharNextA CharLowerA CharToOemA AdjustWindowRectEx ActivateKeyboardLayout GetKeyboardType LoadStringA MessageBoxA CharNextA

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2ec2f10cd260ec264ead76049a5d7731

kernel32

advapi32

comctl32

gdi32

oleaut32

shell32

user32

version

generic