jaffacakes118__96e2af62774688a87f6a9ae16e704d59

General

Target
jaffacakes118__96e2af62774688a87f6a9ae16e704d59
Size 141KB
Sample260919-q2rxea1era
SHA256 b6570c5b55140dd943fd5c54ff710ca7d03f3b67597542dc26179e4f549144af
MD5 96e2af62774688a87f6a9ae16e704d59
SHA1 c272441b5ea4575e78dbb80abc3a2edcc82607a7
SHA512 08989b9140b9d72f0a3fd4545fea379a9f1c8d2a8b42ba49a1746b818e1c04dde71427e2ac4c151f80e7d722afc2695f83a0631ace014f64f0ab56cbd8831526
SSDEEP 1536:JMltOCXIi8s5LeloMHga0kyqd5SeZLPOUNVjJ6tVe1lt1XMltj0o2MliYJKj:KV54vWqd5S/ud1pUjH2MFKj
TLSH
T1CAE3BF1E34C0C437C09A45B59868F6417AEEE824677686C377E72BAFDF211E16B3D206
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__96e2af62774688a87f6a9ae16e704d59

File Explorer

jaffacakes118__96e2af62774688a87f6a9ae16e704d59

.exe 141KB

jaffacakes118__96e2af62774688a87f6a9ae16e704d59

IMPHASH 0641d120c17a37cc740447184fd600b4
SHA256 b6570c5b55140dd943fd5c54ff710ca7d03f3b67597542dc26179e4f549144af
MD5 96e2af62774688a87f6a9ae16e704d59
SHA1 c272441b5ea4575e78dbb80abc3a2edcc82607a7
SHA512 08989b9140b9d72f0a3fd4545fea379a9f1c8d2a8b42ba49a1746b818e1c04dde71427e2ac4c151f80e7d722afc2695f83a0631ace014f64f0ab56cbd8831526
SSDEEP 1536:JMltOCXIi8s5LeloMHga0kyqd5SeZLPOUNVjJ6tVe1lt1XMltj0o2MliYJKj:KV54vWqd5S/ud1pUjH2MFKj
TLSH
T1CAE3BF1E34C0C437C09A45B59868F6417AEEE824677686C377E72BAFDF211E16B3D206
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14159

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleFileNameExA

kernel32

FreeEnvironmentStringsW ExitProcess GetProcAddress GetModuleHandleA GetCurrentProcess GetLastError FindResourceExA LockResource LoadResource FindResourceA WaitForSingleObject CreateThread SetLastError LoadLibraryA IsBadReadPtr VirtualProtect VirtualAlloc HeapAlloc GetCommandLineA GetStartupInfoA HeapFree RaiseException CloseHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection MultiByteToWideChar ReadFile DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType SetFilePointer RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoA SetEndOfFile GetProcessHeap LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__96e2af62774688a87f6a9ae16e704d59

psapi

kernel32

generic