jaffacakes118__8c96f9904052a53d56faaf53f78023bb

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__8c96f9904052a53d56faaf53f78023bb
Size 86KB
Sample260919-mdeemaeb48
SHA256 52241b0aefda188dcb42a765aa32123150f6886406c123f1667867bee6cb2b5e
MD5 8c96f9904052a53d56faaf53f78023bb
SHA1 48175fee2b7b18d29aa8e655e5b169bc04e727c1
SHA512 0caf8a47eef9360b89c59084d99469a5eb928c0e2bfa72e0b412a9dbf9e0b8c455852e5c0880f8acf6e1d85f4f2df9d40d1ca949fde1ebf00ad0ee84034d791c
SSDEEP 1536:idVysttq3pSU9NEBKwee0uLqhXuWJTctoUS+LapfvpiIAX+yC:O4sDqD9iBv0yLWJTcGUS++ppiIaC
TLSH
T160838C15B7928576D1EB11397A0A833376219F301CA0AC4BF3C73E872D74853AE3A61B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__8c96f9904052a53d56faaf53f78023bb

File Explorer

jaffacakes118__8c96f9904052a53d56faaf53f78023bb

.dll 86KB

jaffacakes118__8c96f9904052a53d56faaf53f78023bb

IMPHASH de8da9a63e096a40bc6a1526699d3cd4
SHA256 52241b0aefda188dcb42a765aa32123150f6886406c123f1667867bee6cb2b5e
MD5 8c96f9904052a53d56faaf53f78023bb
SHA1 48175fee2b7b18d29aa8e655e5b169bc04e727c1
SHA512 0caf8a47eef9360b89c59084d99469a5eb928c0e2bfa72e0b412a9dbf9e0b8c455852e5c0880f8acf6e1d85f4f2df9d40d1ca949fde1ebf00ad0ee84034d791c
SSDEEP 1536:idVysttq3pSU9NEBKwee0uLqhXuWJTctoUS+LapfvpiIAX+yC:O4sDqD9iBv0yLWJTcGUS++ppiIaC
TLSH
T160838C15B7928576D1EB11397A0A833376219F301CA0AC4BF3C73E872D74853AE3A61B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

45597

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter SetUnhandledExceptionFilter GetStartupInfoW InterlockedCompareExchange Sleep InterlockedExchange GetModuleHandleW GetLastError GetProcessHeap HeapAlloc DeviceIoControl GetOverlappedResult ResetEvent HeapFree CloseHandle SetLastError HeapReAlloc lstrlenW GetSystemTimeAsFileTime FreeLibrary GetLocaleInfoW LoadLibraryExW SearchPathW WaitForSingleObject GetProcAddress RaiseException SystemTimeToFileTime FileTimeToSystemTime GetModuleFileNameW GetVersionExW LocalFree LocalAlloc CreateMutexW ReleaseMutex DeleteFileW SetFileAttributesW MoveFileExW CreateFileW TerminateProcess GetCurrentProcess UnhandledExceptionFilter VirtualProtect GetTickCount GetCommandLineA FindResourceW

user32

LoadStringW

advapi32

RevertToSelf CreateRestrictedToken ImpersonateLoggedOnUser ReportEventA OpenProcessToken GetTokenInformation

ole32

CoTaskMemFree CoTaskMemAlloc CLSIDFromString CoInitialize CoUninitialize CoCreateInstance CoCreateGuid PropVariantClear

msvcrt

??3@YAXPAX@Z __CxxFrameHandler _except_handler3 _cexit _amsg_exit _initterm _wcmdln exit _XcptFilter memset _vsnwprintf wcstoul _wcsnicmp memcpy wcsstr free memmove isprint wcsncmp _wcsicmp _adjust_fdiv malloc

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__8c96f9904052a53d56faaf53f78023bb

kernel32

user32

advapi32

ole32

msvcrt

msvcp60

generic