jaffacakes118__88deff188c45c52829afa4f936576f21

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__88deff188c45c52829afa4f936576f21
Size 99KB
Sample260919-k7ftfaam4y
SHA256 9b52c5ccc6759c27226a03e9d89aed8f88e767a7aa2f0530b995c55c8dcc64bc
MD5 88deff188c45c52829afa4f936576f21
SHA1 66c9bbdda6c19be7cb9e56e76aa8370aa206e885
SHA512 fb1185e1a23130a7512779eab84d09e98c036cf567cccd3510227047c229c1f1c0b099660288bbf0a652ec1170b7ee6a8e6613ed4fa140000170387a47c4bdf1
SSDEEP 1536:ONPhZCzWEVy6pFH1nPFY8Vy2UCRV8asz1lSQnkrHvNOWEVy6nWEVy6Vx8QIWFSRo:OrZerPpBRPHcz1lRSUrPnrPVx8IFSR
TLSH
T16CA3D0E256884EDBE9FF433295BA1403ED515693BD2CD1447B0E614C0FFE608E4A8BE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__88deff188c45c52829afa4f936576f21

File Explorer

jaffacakes118__88deff188c45c52829afa4f936576f21

.dll 99KB

jaffacakes118__88deff188c45c52829afa4f936576f21

IMPHASH ed0a0d43f904ce1e45afe4c8f444146e
SHA256 9b52c5ccc6759c27226a03e9d89aed8f88e767a7aa2f0530b995c55c8dcc64bc
MD5 88deff188c45c52829afa4f936576f21
SHA1 66c9bbdda6c19be7cb9e56e76aa8370aa206e885
SHA512 fb1185e1a23130a7512779eab84d09e98c036cf567cccd3510227047c229c1f1c0b099660288bbf0a652ec1170b7ee6a8e6613ed4fa140000170387a47c4bdf1
SSDEEP 1536:ONPhZCzWEVy6pFH1nPFY8Vy2UCRV8asz1lSQnkrHvNOWEVy6nWEVy6Vx8QIWFSRo:OrZerPpBRPHcz1lRSUrPnrPVx8IFSR
TLSH
T16CA3D0E256884EDBE9FF433295BA1403ED515693BD2CD1447B0E614C0FFE608E4A8BE9
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11177

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

mfc42u

ord1165 ord826 ord269 ord1115 ord1173 ord1568 ord1570 ord1179 ord342 ord1240 ord1194 ord1563 ord1248 ord1250 ord1571 ord600 ord1129 ord1131 ord5496 ord3948 ord815 ord6371 ord4480 ord2546 ord2504 ord5727 ord3917 ord1089 ord5193 ord2388 ord3341 ord5296 ord5298 ord2717 ord4074 ord4692 ord5303 ord5285 ord5710 ord4616 ord4418 ord3733 ord561 ord4269 ord4704 ord4282 ord6375 ord6193 ord3087 ord2127 ord3000 ord5156 ord5155 ord5154 ord4970 ord5426 ord4899 ord4736 ord6330 ord4352 ord825 ord2859 ord3133 ord4253 ord818 ord4942 ord5261 ord4371 ord4848 ord4992 ord2506 ord6048 ord4073 ord1767 ord4401 ord5237 ord2377 ord5157 ord6370 ord4347 ord5283 ord3793 ord4829 ord4435 ord2640 ord2047 ord6372 ord3744 ord5059 ord1720 ord5257 ord2438 ord2116 ord5273 ord2977 ord3142 ord3254 ord4459 ord3131 ord3257 ord2980 ord3076 ord2971 ord3825 ord3826 ord3820 ord3074 ord4075 ord4621 ord4419 ord489 ord567 ord768 ord1899 ord6466 ord823 ord2385 ord1258 ord1262

advapi32

BuildSecurityDescriptorW GetAce DeleteAce InitializeAcl AddAce GetAclInformation MakeSelfRelativeSD EqualSid RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW GetSecurityDescriptorControl MakeAbsoluteSD GetSecurityDescriptorOwner SetSecurityDescriptorOwner GetSecurityDescriptorGroup SetSecurityDescriptorGroup GetSecurityDescriptorDacl SetSecurityDescriptorDacl GetSecurityDescriptorSacl SetSecurityDescriptorSacl SetSecurityDescriptorControl ConvertStringSecurityDescriptorToSecurityDescriptorW ConvertSecurityDescriptorToStringSecurityDescriptorW MapGenericMask RegEnumKeyExW

gdi32

GetDeviceCaps CreateRectRgnIndirect CreateDCW RestoreDC DeleteDC SetViewportOrgEx SetWindowOrgEx SetMapMode GetClipRgn CreateRectRgn SelectClipRgn Rectangle SetTextAlign TextOutW SaveDC LPtoDP DeleteObject

kernel32

InitializeCriticalSection DeleteCriticalSection GetModuleHandleA GetModuleHandleW GetProcAddress GetFileAttributesW GetVersion lstrlenW GetLastError SetLastError RaiseException EnterCriticalSection LeaveCriticalSection FlushInstructionCache GetCurrentProcess LoadLibraryW GetModuleFileNameW OutputDebugStringA GetCurrentThreadId InterlockedIncrement InterlockedDecrement FreeLibrary LoadLibraryA GlobalFree GlobalAlloc LocalFree LocalAlloc lstrcmpiW LoadLibraryExW MultiByteToWideChar SizeofResource LoadResource GetVersionExA InterlockedExchange HeapFree FindResourceW GetProcessHeap HeapAlloc VirtualFree VirtualAlloc Sleep InterlockedCompareExchange QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter MulDiv

ole32

StringFromCLSID CoTaskMemRealloc CoTaskMemAlloc CLSIDFromString CLSIDFromProgID CoCreateInstance HWND_UserSize HWND_UserMarshal HWND_UserUnmarshal HWND_UserFree HBITMAP_UserSize HBITMAP_UserMarshal HBITMAP_UserUnmarshal HBITMAP_UserFree CoTaskMemFree OleSaveToStream WriteClassStm OleRegGetMiscStatus OleRegGetUserType OleRegEnumVerbs CreateOleAdviseHolder OleLoadFromStream CoUninitialize CoInitialize

oleaut32

SysAllocStringByteLen VarUI4FromStr VARIANT_UserSize VARIANT_UserMarshal VARIANT_UserUnmarshal VARIANT_UserFree BSTR_UserSize BSTR_UserMarshal BSTR_UserUnmarshal BSTR_UserFree OleCreatePropertyFrame LoadTypeLi LoadRegTypeLi SysStringLen VariantChangeType VariantClear VariantInit SysStringByteLen SysFreeString

user32

FindWindowExW GetWindowThreadProcessId UnhookWindowsHookEx CallNextHookEx SetWindowsHookExW GetParent SetWindowLongW GetWindowLongW UnregisterClassA LoadCursorW ReleaseDC GetDC SetWindowPos SetWindowRgn OffsetRect EqualRect IntersectRect EndPaint GetClientRect BeginPaint CallWindowProcW PtInRect UnionRect DefWindowProcW RegisterClassExW GetClassInfoExW CreateWindowExW SetFocus IsChild GetFocus ShowWindow DestroyWindow IsWindow InvalidateRect GetKeyState GetWindowRect ScreenToClient EnableWindow SendMessageW PostMessageW GetDlgItem CharNextW

aclui

ord1

Name

.text

Size

58KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.abss

Size

Virtual Size

124KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdat

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

165B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

248B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__88deff188c45c52829afa4f936576f21

mfc42u

advapi32

gdi32

kernel32

ole32

oleaut32

user32

aclui

generic