jaffacakes118__2e600275cceda73e5b1826f55cd14979

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__2e600275cceda73e5b1826f55cd14979
Size 143KB
Sample260919-2ytsdacd77
SHA256 7b29ad85b21754b71756d4a1b68b7534aa2514cca65a40e46bc1450f9b6d20ab
MD5 2e600275cceda73e5b1826f55cd14979
SHA1 37b222387cf28578001c9d56969ba53732f7981f
SHA512 ae6e64b2a389ec01ffbe389320c50ec36ae9b70c316788d6cb75fca92f5017681467d93078adaf26fa51744682fa9ece4311009b17c7fde69b16ccd1b1a78be0
SSDEEP 3072:wDYEeMdjLXVdjZ6OyFR40lMG+ihJA7SEkr4QUP01Y:wDYEeMdjX0O6RV+fWUK
TLSH
T19EE301527FEF52A9F4F63B3058F12555A1BABFC6A937C20E1188745E49B06C84CB4372
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2e600275cceda73e5b1826f55cd14979

File Explorer

jaffacakes118__2e600275cceda73e5b1826f55cd14979

.exe 143KB

jaffacakes118__2e600275cceda73e5b1826f55cd14979

IMPHASH 4935d067296c5fb949c1b20ae89f794f
SHA256 7b29ad85b21754b71756d4a1b68b7534aa2514cca65a40e46bc1450f9b6d20ab
MD5 2e600275cceda73e5b1826f55cd14979
SHA1 37b222387cf28578001c9d56969ba53732f7981f
SHA512 ae6e64b2a389ec01ffbe389320c50ec36ae9b70c316788d6cb75fca92f5017681467d93078adaf26fa51744682fa9ece4311009b17c7fde69b16ccd1b1a78be0
SSDEEP 3072:wDYEeMdjLXVdjZ6OyFR40lMG+ihJA7SEkr4QUP01Y:wDYEeMdjX0O6RV+fWUK
TLSH
T19EE301527FEF52A9F4F63B3058F12555A1BABFC6A937C20E1188745E49B06C84CB4372
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5715

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpW SetHandleCount GetProcessHeap VirtualProtect GetNumberFormatW WritePrivateProfileSectionA WritePrivateProfileSectionW GetVersionExA ExitThread FormatMessageW CreateEventW VirtualAlloc HeapReAlloc GetComputerNameA GlobalAlloc DeleteCriticalSection LocalFileTimeToFileTime GetModuleHandleA VirtualFree lstrcpyW GetTempPathA GetDriveTypeW OutputDebugStringW CreateFileW WaitForSingleObject SystemTimeToFileTime SetErrorMode GetProcAddress DeleteFileW LoadLibraryW CreateEventA ReleaseMutex GlobalSize

msvcrt

_controlfp memset wcstok exit wcsrchr _wcmdln __setusermatherr _wcsnicmp _CxxThrowException _onexit _exit fprintf rand strerror malloc memmove

user32

IsWindowEnabled DrawTextW SetWindowTextA FillRect EnableWindow GetSystemMenu CreateDialogParamW UnregisterClassW MsgWaitForMultipleObjects CopyRect RegisterWindowMessageW PostMessageW FrameRect wsprintfA IntersectRect RegisterClassW SetDlgItemInt SystemParametersInfoA DrawEdge GetProcessWindowStation PostThreadMessageW GetMessageW LoadCursorW SendDlgItemMessageW DefDlgProcW

gdi32

MoveToEx DeleteDC SetTextAlign RealizePalette SelectObject ExtTextOutW SetStretchBltMode Rectangle SelectPalette GetRegionData DeleteObject StretchBlt GetTextExtentPointW CreateCompatibleBitmap GetTextMetricsW CreateCompatibleDC SetWindowExtEx CreateRoundRectRgn CreateBitmap CreatePen GetObjectA

tapi32

phoneGetLamp MMCInitialize lineAddProviderW lineGetIDW lineSetAgentMeasurementPeriod tapiRequestMediaCallA lineCompleteCall phoneShutdown

Name

.text

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.CRT

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

138B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2e600275cceda73e5b1826f55cd14979

kernel32

msvcrt

user32

gdi32

tapi32

generic