jaffacakes118__2d85517fe8e836a650ea14fa031527c2

General

Target
jaffacakes118__2d85517fe8e836a650ea14fa031527c2
Size 2.3MB
Sample260919-2f3mkacc43
SHA256 8ed3b3fc33c27558b1e8f1786cf35f91a4cfbbb5749d12c770165f13012db5bb
MD5 2d85517fe8e836a650ea14fa031527c2
SHA1 e0746d606bf8fa6d742f813e012949346aca056a
SHA512 b5ac0564e3ed24aee90eb7d963bafdc0e2fa9236cb3a2f3cb0bcc59e77ed8e5b1e1bb89a619b04c00a627f271bda6288840718827d2bd3055f2a3237c410250e
SSDEEP 49152:vIv6CD3uUlKkwXA5R7mJ0N1KbozS+iyUZTwb+v8oai93PblttrJH9Hib:vIv6CivkwQ5R7miPiXPfai93DvVrib
TLSH
T1B0B5337023944C26D55409F429D8AF28CE27CD7F8A84879B0B85FBAEADF1E538E35057
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2d85517fe8e836a650ea14fa031527c2

File Explorer

jaffacakes118__2d85517fe8e836a650ea14fa031527c2

.exe 2.3MB

jaffacakes118__2d85517fe8e836a650ea14fa031527c2

IMPHASH c5319e076a4e8512805ca6dc9210f0f6
SHA256 8ed3b3fc33c27558b1e8f1786cf35f91a4cfbbb5749d12c770165f13012db5bb
MD5 2d85517fe8e836a650ea14fa031527c2
SHA1 e0746d606bf8fa6d742f813e012949346aca056a
SHA512 b5ac0564e3ed24aee90eb7d963bafdc0e2fa9236cb3a2f3cb0bcc59e77ed8e5b1e1bb89a619b04c00a627f271bda6288840718827d2bd3055f2a3237c410250e
SSDEEP 49152:vIv6CD3uUlKkwXA5R7mJ0N1KbozS+iyUZTwb+v8oai93PblttrJH9Hib:vIv6CivkwQ5R7miPiXPfai93DvVrib
TLSH
T1B0B5337023944C26D55409F429D8AF28CE27CD7F8A84879B0B85FBAEADF1E538E35057
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

25707

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindClose FindFirstFileA lstrlenA lstrcpyA GetWindowsDirectoryA lstrcatA RemoveDirectoryA FindNextFileA DeleteFileA lstrcmpA SetFileAttributesA LocalFileTimeToFileTime DosDateTimeToFileTime _lcreat _lread GetProcAddress FreeLibrary GetVersionExA GetLastError GetCurrentProcess _llseek GetModuleFileNameA GetTempPathA GlobalFree GlobalAlloc HeapReAlloc VirtualAlloc SetEnvironmentVariableA _lopen SetFileTime LoadLibraryA _lclose _hread _hwrite CreateDirectoryA GetTimeZoneInformation GetSystemTime GetLocalTime FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess GetCPInfo GetACP GetOEMCP WideCharToMultiByte TerminateProcess GetFullPathNameA GetCurrentDirectoryA MultiByteToWideChar LCMapStringA LCMapStringW UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate VirtualFree HeapFree RtlUnwind WriteFile HeapAlloc GetStringTypeA GetStringTypeW CompareStringA CompareStringW

user32

ExitWindowsEx LoadIconA wsprintfA MessageBoxA

advapi32

LookupPrivilegeValueA AdjustTokenPrivileges OpenProcessToken

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2d85517fe8e836a650ea14fa031527c2

kernel32

user32

advapi32

generic