jaffacakes118__85fb5c4856c9b241a6fb2fca85fb3760

General

Target
jaffacakes118__85fb5c4856c9b241a6fb2fca85fb3760
Size 97KB
Sample260919-ktlsjaycrg
SHA256 16fc8901a1ba5c1e5f4c833ec1fe244705452c0ea641018e6462a1119590a8ef
MD5 85fb5c4856c9b241a6fb2fca85fb3760
SHA1 0bafb908d688b964c0dd984494c64a58503f4f4d
SHA512 4de3a9004a90ee2bb27a73a54a62f18272460cdaccbe387c42b3dfbe1f6255d088ca3b33f95e881ca7c88fcb785dfc49b638b32f1599c17f97b495a054ed89ac
SSDEEP 1536:JMltOCXIG8s5LeloMHga0kyqd5SeZLPOUNVjJ6tVe1lt1:KB54vWqd5S/ud1p
TLSH
T13FA3AF1B34C0D476C08A85B58858CB515ADEE435A6B6D6C337E72BEFEF211E06B3E241
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__85fb5c4856c9b241a6fb2fca85fb3760

File Explorer

jaffacakes118__85fb5c4856c9b241a6fb2fca85fb3760

.exe 97KB

jaffacakes118__85fb5c4856c9b241a6fb2fca85fb3760

IMPHASH 0641d120c17a37cc740447184fd600b4
SHA256 16fc8901a1ba5c1e5f4c833ec1fe244705452c0ea641018e6462a1119590a8ef
MD5 85fb5c4856c9b241a6fb2fca85fb3760
SHA1 0bafb908d688b964c0dd984494c64a58503f4f4d
SHA512 4de3a9004a90ee2bb27a73a54a62f18272460cdaccbe387c42b3dfbe1f6255d088ca3b33f95e881ca7c88fcb785dfc49b638b32f1599c17f97b495a054ed89ac
SSDEEP 1536:JMltOCXIG8s5LeloMHga0kyqd5SeZLPOUNVjJ6tVe1lt1:KB54vWqd5S/ud1p
TLSH
T13FA3AF1B34C0D476C08A85B58858CB515ADEE435A6B6D6C337E72BEFEF211E06B3E241
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14159

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleFileNameExA

kernel32

FreeEnvironmentStringsW ExitProcess GetProcAddress GetModuleHandleA GetCurrentProcess GetLastError FindResourceExA LockResource LoadResource FindResourceA WaitForSingleObject CreateThread SetLastError LoadLibraryA IsBadReadPtr VirtualProtect VirtualAlloc HeapAlloc GetCommandLineA GetStartupInfoA HeapFree RaiseException CloseHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection MultiByteToWideChar ReadFile DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType SetFilePointer RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoA SetEndOfFile GetProcessHeap LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__85fb5c4856c9b241a6fb2fca85fb3760

psapi

kernel32

generic