jaffacakes118__90b7baad27ce1c8cf5bee750ca09a997

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__90b7baad27ce1c8cf5bee750ca09a997
Size 57KB
Sample260919-nwl3vszdrf
SHA256 a406728533aa3767e8f842821d9ee8c13e74a47d51842de7306c452d2667ffe6
MD5 90b7baad27ce1c8cf5bee750ca09a997
SHA1 c4a8171e496d1790cf72b32153f75654e4bda46c
SHA512 97f2f949a1d0452ae0f173ec6b8bb91fd924b3d11b085c51a64197142cc9d0a31aad4704e34b3337a8487b1bc4fea622aa85a96141b1441d8abea25fb81fd73d
SSDEEP 768:K8RXAAN2EINAfzPUu8XEX8X0b3N/dE1ba1xCeOfBItRHO+JUKQSS9E1WvGIg3RJ7:KZAYv6U5aEEzeBOu+JUPEk1G28Iq1
TLSH
T1CC43F19062B08493E7490B716089A763EC31AD1DF265831BBBF36B5F6CF6314E853B94
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__90b7baad27ce1c8cf5bee750ca09a997

File Explorer

jaffacakes118__90b7baad27ce1c8cf5bee750ca09a997

.dll 57KB

jaffacakes118__90b7baad27ce1c8cf5bee750ca09a997

IMPHASH 523b35f7d603a8ed69be1b5c6bc7bd2a
SHA256 a406728533aa3767e8f842821d9ee8c13e74a47d51842de7306c452d2667ffe6
MD5 90b7baad27ce1c8cf5bee750ca09a997
SHA1 c4a8171e496d1790cf72b32153f75654e4bda46c
SHA512 97f2f949a1d0452ae0f173ec6b8bb91fd924b3d11b085c51a64197142cc9d0a31aad4704e34b3337a8487b1bc4fea622aa85a96141b1441d8abea25fb81fd73d
SSDEEP 768:K8RXAAN2EINAfzPUu8XEX8X0b3N/dE1ba1xCeOfBItRHO+JUKQSS9E1WvGIg3RJ7:KZAYv6U5aEEzeBOu+JUPEk1G28Iq1
TLSH
T1CC43F19062B08493E7490B716089A763EC31AD1DF265831BBBF36B5F6CF6314E853B94
MD5 SHA1 SHA512 SSDEEP TLSH

windows:7 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5095

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle GlobalAlloc LocalAlloc DeleteCriticalSection GetUserDefaultLCID ReleaseMutex WaitForMultipleObjects FileTimeToSystemTime ExitThread SetErrorMode SetLastError LockResource SystemTimeToTzSpecificLocalTime UnmapViewOfFile MapViewOfFile WaitForSingleObject VirtualQueryEx FreeLibrary CreateFileMappingA GetModuleHandleA FindVolumeMountPointClose

imguries

ImmSetStatusWindowPos ImmProcessKey ImmUnregisterWordA ILFindChild CtfImmCoUninitialize ILIsEqual RealDriveType ImmGetCompositionStringA ImmPenAuxInput PifMgr_SetProperties ImmEnumRegisterWordA PifMgr_GetProperties DoEnvironmentSubstA SdbCloseDatabase SdbQueryDataEx SdbReadMsiTransformInfo DAD_AutoScroll ImmGetCompositionFontA CtfImmSetAppCompatFlags IsLFNDrive ImmIMPGetIMEA ImmGetGuideLineA RealShellExecuteA SdbReadQWORDTagRef SdbRegisterDatabaseEx RealShellExecuteExA SdbGetFirstChild DAD_DragEnterEx ImmGetIMCCLockCount ImmNotifyIME ImmTranslateMessage ImmUnlockClientImc ImmGetImeInfoEx ImmGenerateMessage CtfImmSetCiceroStartInThread DAD_DragMove ImmWINNLSGetIMEHotkey ImmSetConversionStatus DragAcceptFiles ImmDestroyIMCC SdbGetTagDataSize ImmLockIMC ImmReleaseContext ImmGetConversionStatus ImmUnlockIMC SdbGetTagFromTagID

user32

IsIconic GetDlgItem InvalidateRect UnhookWindowsHookEx GetParent IsWindow GetDC ReleaseDC

ntdll

NtSetQuotaInformationFile wcstoul

advapi32

GetTokenInformation GetAce AdjustTokenPrivileges ControlService CheckTokenMembership

ole32

CoUninitialize

netapi32

NetShareEnum

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__90b7baad27ce1c8cf5bee750ca09a997

kernel32

imguries

user32

ntdll

advapi32

ole32

netapi32

generic