jaffacakes118__2f2d5cd6364d2fe3a9478816c39d8b9c

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__2f2d5cd6364d2fe3a9478816c39d8b9c
Size 32KB
Sample260919-3cv9rayape
SHA256 6ffbfc5e0230c33cced1a5a0296567c511c1615e499af3c423a734cf47c4ce80
MD5 2f2d5cd6364d2fe3a9478816c39d8b9c
SHA1 c7952df324b0554eac89336450913089d4735017
SHA512 d6d541f5873af34456c9cb5b5626e646ba1f7a7e057c79ec5bcd3077978a1523116a5036b2f5303892b7176dba47b1d3d3b7576d90ed778e843caa62d663e200
SSDEEP 768:5LNruB48bp5x75hy863tj5PEp7tXAcjziSz3i2718TOVOiOlRclXzjlu:5LNruZ75hy863tj5PEp7tXAu2Sjx718l
TLSH
T193E24B53BB5684A3D3DB023475062BBEDBFC69305F469556CB2247CA1CB46C3EA36603
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2f2d5cd6364d2fe3a9478816c39d8b9c

File Explorer

jaffacakes118__2f2d5cd6364d2fe3a9478816c39d8b9c

.dll 32KB

jaffacakes118__2f2d5cd6364d2fe3a9478816c39d8b9c

IMPHASH 6b8023a57e5be51be6a9aeb919ade5a9
SHA256 6ffbfc5e0230c33cced1a5a0296567c511c1615e499af3c423a734cf47c4ce80
MD5 2f2d5cd6364d2fe3a9478816c39d8b9c
SHA1 c7952df324b0554eac89336450913089d4735017
SHA512 d6d541f5873af34456c9cb5b5626e646ba1f7a7e057c79ec5bcd3077978a1523116a5036b2f5303892b7176dba47b1d3d3b7576d90ed778e843caa62d663e200
SSDEEP 768:5LNruB48bp5x75hy863tj5PEp7tXAcjziSz3i2718TOVOiOlRclXzjlu:5LNruZ75hy863tj5PEp7tXAu2Sjx718l
TLSH
T193E24B53BB5684A3D3DB023475062BBEDBFC69305F469556CB2247CA1CB46C3EA36603
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23880

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

MultiByteToWideChar GetSystemDirectoryA WaitForSingleObject ReadFile GetFileSize SetFilePointer GetLastError CreateEventA GetModuleFileNameA GetTempPathA GetWindowsDirectoryA DeleteFileA SetFileAttributesA GetCommandLineA GlobalLock CreateFileA WriteFile GlobalUnlock GlobalFree LoadLibraryA GetProcAddress GlobalAlloc VirtualProtect GetModuleHandleA ExitProcess IsBadReadPtr CreateThread CloseHandle Sleep GetCurrentDirectoryA GetPrivateProfileStringA

user32

GetParent GetWindowThreadProcessId EnumWindows wsprintfA GetWindowTextA ReleaseDC GetWindowRect GetDC GetDesktopWindow GetClientRect CallWindowProcA GetClassNameA SetWindowLongA RegisterShellHookWindow RegisterWindowMessageA

gdi32

CreateDCA GetDeviceCaps DeleteObject BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC GetDIBits RealizePalette SelectPalette GetStockObject GetObjectA DeleteDC

gdiplus

GdipCloneImage GdipAlloc GdipFree GdipGetImageEncodersSize GdipGetImageEncoders GdiplusStartup GdipSaveImageToFile GdiplusShutdown GdipLoadImageFromFile GdipDisposeImage

msvcp60

??0_Lockit@std@@QAE@XZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??0Init@ios_base@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ

ws2_32

inet_ntoa send recv socket inet_addr htons connect closesocket gethostbyname WSACleanup WSAStartup

wininet

InternetOpenUrlA InternetCloseHandle InternetReadFile InternetOpenA

msvcrt

_access strrchr strchr atoi strncpy abs free _onexit _initterm _adjust_fdiv _getpid _stricmp _strlwr _strrev __dllonexit sprintf malloc wcscmp ??2@YAPAXI@Z memcpy __CxxFrameHandler strstr strcmp strlen memset strcpy strcat

netapi32

Netbios

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2f2d5cd6364d2fe3a9478816c39d8b9c

kernel32

user32

gdi32

gdiplus

msvcp60

ws2_32

wininet

msvcrt

netapi32

generic