jaffacakes118__85ec19e597aec629eadf07b86ddc8bee

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__85ec19e597aec629eadf07b86ddc8bee
Size 312KB
Sample260919-ksvdaadd53
SHA256 c408c3a9d61dec2b31c34eb6089cfcde61c97edbbbe038ae8f06d7b55fec7287
MD5 85ec19e597aec629eadf07b86ddc8bee
SHA1 eeea5d54e0677795c984652028cf2a5b5a52379b
SHA512 daf91379a942bf9d09603ec2386f3742cd93c4f3dac6e58cf8cd8006d3af5f8b71b715cf62757b1d359c4891e2c8f7e015d00c83d53276a9c8485cab02f9252b
SSDEEP 3072:wmA1ehl/69NcGiQAP6MmsCXHlcHjEcCduLwBVYQrt/RglsftY:wmDl/UcnPkFUjGbRs
TLSH
T16364E7CAD0AE465FDAB0427032D4D1AA55C28E43079745FBEB1A3C94B37FAE644CD263
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__85ec19e597aec629eadf07b86ddc8bee

File Explorer

jaffacakes118__85ec19e597aec629eadf07b86ddc8bee

.exe 312KB

jaffacakes118__85ec19e597aec629eadf07b86ddc8bee

IMPHASH d84d991d25f1d024e6888428c049c5f2
SHA256 c408c3a9d61dec2b31c34eb6089cfcde61c97edbbbe038ae8f06d7b55fec7287
MD5 85ec19e597aec629eadf07b86ddc8bee
SHA1 eeea5d54e0677795c984652028cf2a5b5a52379b
SHA512 daf91379a942bf9d09603ec2386f3742cd93c4f3dac6e58cf8cd8006d3af5f8b71b715cf62757b1d359c4891e2c8f7e015d00c83d53276a9c8485cab02f9252b
SSDEEP 3072:wmA1ehl/69NcGiQAP6MmsCXHlcHjEcCduLwBVYQrt/RglsftY:wmDl/UcnPkFUjGbRs
TLSH
T16364E7CAD0AE465FDAB0427032D4D1AA55C28E43079745FBEB1A3C94B37FAE644CD263
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

35575

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress FormatMessageA DeleteFileA MulDiv IsDBCSLeadByte GetExitCodeProcess CreateProcessA GetTempFileNameA GetSystemDefaultLCID WaitForSingleObject CompareStringA Sleep SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime FreeLibrary RemoveDirectoryA FindNextFileA WritePrivateProfileSectionA GetStartupInfoA WriteFile ReadFile SetFileAttributesA LocalFree LocalAlloc LockResource LoadResource FindResourceA SizeofResource GetModuleHandleA GlobalFree GlobalUnlock GlobalLock GlobalAlloc MultiByteToWideChar lstrcmpiA GetDiskFreeSpaceA HeapAlloc GetProcessHeap HeapFree lstrcpynA ExitProcess CreateFileA CreateFileMappingA MapViewOfFile UnmapViewOfFile CreateDirectoryA SetFilePointer GetFileSize FindClose GetLastError FindFirstFileA lstrlenA GetFileAttributesA GetPrivateProfileStringA GetSystemDirectoryA GetWindowsDirectoryA lstrcatA GetModuleFileNameA GetTempPathA lstrcpyA GetPrivateProfileSectionA LoadLibraryA MoveFileExA WritePrivateProfileStringA GetShortPathNameA FlushFileBuffers IsBadCodePtr CloseHandle SetStdHandle SetUnhandledExceptionFilter LCMapStringW LCMapStringA GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetStringTypeW GetStringTypeA GetOEMCP GetACP GetCPInfo IsBadWritePtr HeapReAlloc VirtualAlloc VirtualFree HeapCreate HeapDestroy GetVersionExA GetEnvironmentVariableA GetVersion GetCommandLineA RtlUnwind IsBadReadPtr

user32

SetFocus PostMessageA GetDlgItem SendDlgItemMessageA GetParent GetDC LoadImageA MessageBoxA wsprintfA CheckRadioButton EnableWindow IsDlgButtonChecked GetDlgItemTextA CheckDlgButton SetDlgItemTextA ReleaseDC GetWindowLongA SetWindowTextA CharNextA GetDesktopWindow GetWindowTextA GetWindow DestroyWindow CreateDialogParamA GetSysColor GetSysColorBrush FillRect BeginPaint DrawTextA EndPaint GetClientRect ScreenToClient MoveWindow SetParent MapDialogRect GetNextDlgTabItem GetWindowRect CreateDialogIndirectParamA IsWindow InvalidateRect IsWindowEnabled ShowWindow UpdateWindow IsDialogMessageA SetWindowPos GetActiveWindow SetActiveWindow SetWindowLongA LoadStringA LoadIconA DispatchMessageA SendMessageA TranslateMessage PeekMessageA

gdi32

CreateFontIndirectA RealizePalette SelectPalette CreatePalette GetObjectA GetStockObject CreateDIBitmap GetTextExtentPointA SelectObject EnumFontFamiliesExA DeleteDC BitBlt TextOutA SetBkMode SetBkColor CreateCompatibleDC CreateSolidBrush SetTextColor DeleteObject GetDeviceCaps

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyExA

shell32

ShellExecuteA SHBrowseForFolderA SHGetPathFromIDListA SHGetMalloc

lz32

LZOpenFileA LZCopy LZClose

comctl32

ord17

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__85ec19e597aec629eadf07b86ddc8bee

kernel32

user32

gdi32

advapi32

shell32

lz32

comctl32

generic