jaffacakes118__85085a06a239aa279f7342717acf38c7

General

Target
jaffacakes118__85085a06a239aa279f7342717acf38c7
Size 566KB
Sample260919-kffdlaybra
SHA256 7a3abc2a9a082cc3ceb4807e1bb16bbdf110b59ba19ef12f3aef18c16b0dd1be
MD5 85085a06a239aa279f7342717acf38c7
SHA1 e3bed376312f4d9b4cad30491ad0a72ac7a50bf4
SHA512 b2cd0f8469fe0be2526e36e68715b92ec574d436f819188c0cc329dce83a7f475520255dbe3622bf93fcb186bccc17f3a0e5636a98e3a27a0dcd0007e1251bc4
SSDEEP 12288:KAcBi8xBEoRPHEsuaOZ3brKXV3YcM82XmApcz9fcgqdHC:KAcBLzuPJbrFcCdcxf+HC
TLSH
T13EC4124BB03E678BEBC881391F3E7476B425F68D4A5C9033B9889D29456D1423CCEDE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__85085a06a239aa279f7342717acf38c7

File Explorer

jaffacakes118__85085a06a239aa279f7342717acf38c7

.exe 566KB

jaffacakes118__85085a06a239aa279f7342717acf38c7

IMPHASH a88f2fe31ccfd3b1d15c68747bdc7f79
SHA256 7a3abc2a9a082cc3ceb4807e1bb16bbdf110b59ba19ef12f3aef18c16b0dd1be
MD5 85085a06a239aa279f7342717acf38c7
SHA1 e3bed376312f4d9b4cad30491ad0a72ac7a50bf4
SHA512 b2cd0f8469fe0be2526e36e68715b92ec574d436f819188c0cc329dce83a7f475520255dbe3622bf93fcb186bccc17f3a0e5636a98e3a27a0dcd0007e1251bc4
SSDEEP 12288:KAcBi8xBEoRPHEsuaOZ3brKXV3YcM82XmApcz9fcgqdHC:KAcBLzuPJbrFcCdcxf+HC
TLSH
T13EC4124BB03E678BEBC881391F3E7476B425F68D4A5C9033B9889D29456D1423CCEDE9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5520

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetVersion ExitProcess HeapAlloc GetProcessHeap VirtualAlloc Sleep VirtualFree UnmapViewOfFile IsValidCodePage CreateProcessA InterlockedExchange GetACP CloseHandle ReadFile SetFilePointer MapViewOfFile InterlockedCompareExchange HeapSize WideCharToMultiByte GetCommandLineW SizeofResource lstrlenW GetEnvironmentStringsW LCMapStringA GetConsoleCP lstrlenA GetSystemInfo LCMapStringW LeaveCriticalSection CreateFileA TlsSetValue GetFileType CreateEventA CreateFileW GlobalLock DuplicateHandle FindFirstFileW CreateFileMappingA CompareStringA FindFirstFileA CompareStringW GetProcAddress DeleteFileW DeleteFileA GetFileSize GetStartupInfoA FreeLibrary GetCurrentThreadId GetVersionExA TlsAlloc QueryPerformanceCounter GetOEMCP lstrcmpiA SetHandleCount EnterCriticalSection HeapFree WriteConsoleW GlobalAlloc WriteConsoleA TerminateProcess MulDiv SetUnhandledExceptionFilter CreateThread MultiByteToWideChar TlsGetValue UnhandledExceptionFilter lstrcmpiW GetModuleFileNameA FlushFileBuffers IsDebuggerPresent GetModuleFileNameW SetLastError FormatMessageA InterlockedDecrement FindClose InitializeCriticalSection LocalFree GetExitCodeProcess GetStringTypeW HeapReAlloc WriteFile GetStringTypeA LoadLibraryW GetCPInfo GetTempPathA FreeEnvironmentStringsW SetErrorMode LocalAlloc GetLocaleInfoA GetConsoleMode GetCurrentProcess DeleteCriticalSection FreeEnvironmentStringsA HeapDestroy GetDriveTypeA WaitForSingleObject GetCurrentThread GetCommandLineA GetModuleHandleA GetTickCount LoadLibraryA GetCurrentProcessId

user32

LoadIconA CheckMenuItem SetWindowLongA GetWindowRect SetFocus DispatchMessageA RegisterClassA EnableMenuItem GetWindow EnableWindow ShowWindow UpdateWindow SendMessageA GetDC SystemParametersInfoA IsWindowVisible InvalidateRect GetClientRect SetCursor MoveWindow

gdi32

GetStockObject DeleteDC GetDeviceCaps DeleteObject CreateCompatibleDC

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__85085a06a239aa279f7342717acf38c7

kernel32

user32

gdi32

generic