jaffacakes118__899dea32b52997225f727d55647275bc

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__899dea32b52997225f727d55647275bc
Size 308KB
Sample260919-lf48dsdf82
SHA256 936923180c0e474a058b7cd8813120b9bfccded074b7a97b86a894cc2cf51be9
MD5 899dea32b52997225f727d55647275bc
SHA1 6ba999e43e594e6d97aeeefe6a349199ace07e67
SHA512 6dc09fe05e28e8de2b075a77b0ef2ebe31b88b1ea10f3f935def7499567b706863d34573761d93349d821807c200ee02607be46ed66c4fabe3a16d567b8546ae
SSDEEP 3072:yKF9cje5oY484x15TAURRTQz4OUBZN2qPPQwPAarF9zxO7+KJ0sXdPfp:yKF9qoY15k8Tm4OUJDpiigPx
TLSH
T10B644B26FD0DEEABCDC9B330A2381A3D6A377B54CC190E61D778ED520572ECA5097A11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__899dea32b52997225f727d55647275bc

File Explorer

jaffacakes118__899dea32b52997225f727d55647275bc

.exe 308KB

jaffacakes118__899dea32b52997225f727d55647275bc

IMPHASH 4b7df1510b83d806b44846742a42fa8f
SHA256 936923180c0e474a058b7cd8813120b9bfccded074b7a97b86a894cc2cf51be9
MD5 899dea32b52997225f727d55647275bc
SHA1 6ba999e43e594e6d97aeeefe6a349199ace07e67
SHA512 6dc09fe05e28e8de2b075a77b0ef2ebe31b88b1ea10f3f935def7499567b706863d34573761d93349d821807c200ee02607be46ed66c4fabe3a16d567b8546ae
SSDEEP 3072:yKF9cje5oY484x15TAURRTQz4OUBZN2qPPQwPAarF9zxO7+KJ0sXdPfp:yKF9qoY15k8Tm4OUJDpiigPx
TLSH
T10B644B26FD0DEEABCDC9B330A2381A3D6A377B54CC190E61D778ED520572ECA5097A11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9959

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WinExec GetModuleFileNameA GetTempPathA CloseHandle CreateFileA GetVersionExA Sleep SetEnvironmentVariableA CompareStringW CompareStringA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar ReadFile SetEndOfFile LoadLibraryA GetTimeZoneInformation GetSystemTime GetLocalTime GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue GetLastError EnterCriticalSection LeaveCriticalSection HeapFree WriteFile InitializeCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType DeleteCriticalSection GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree RtlUnwind HeapAlloc VirtualAlloc HeapReAlloc SetStdHandle FlushFileBuffers SetFilePointer InterlockedDecrement InterlockedIncrement GetCPInfo GetACP GetOEMCP GetProcAddress

user32

CreateWindowExA DefWindowProcA DispatchMessageA TranslateMessage GetMessageA ShowWindow RegisterClassExA PostQuitMessage

shell32

StrStrA

urlmon

URLDownloadToFileA

shlwapi

SHGetValueA SHSetValueA

Name

.text

Size

36KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

196KB

Virtual Size

201KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

kdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

jdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

hdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

gdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

fdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

edata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ddata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

cdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

bdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

qdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ndata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

mdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

idata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__899dea32b52997225f727d55647275bc

kernel32

user32

shell32

urlmon

shlwapi

generic