jaffacakes118__99639a13de4f5d04f3c7a8f423074402

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__99639a13de4f5d04f3c7a8f423074402
Size 119KB
Sample260919-ryvdsscq9x
SHA256 c71b58fb1e7cc55ebbe5e41a94994aac03bd07272f08946e8f9c8a06f242f8ed
MD5 99639a13de4f5d04f3c7a8f423074402
SHA1 67522f9267f1711295adedf69983ef0d8bc80196
SHA512 674b639cd1ee24af076277cb28849daa557eacf7b4cd6714bde8465beafd8b4a30fb54a0a9a2f57ef47416f150ce968ae621dcb877faaf4c529c87831bd058ab
SSDEEP 1536:KMnj2SOxCG/JGE0JQF19iufHsnRF45rOMsyED8hSrW5ATszLAgi3u2S3pP4nUb:KMnZHJQFrMFIyMZUsAqUD+24pK+
TLSH
T10EC35A237AC74436F0220B764CA9A695977FFE313A21582F71E4774D08FAAC1CC4966B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__99639a13de4f5d04f3c7a8f423074402

File Explorer

jaffacakes118__99639a13de4f5d04f3c7a8f423074402

.exe 119KB

jaffacakes118__99639a13de4f5d04f3c7a8f423074402

IMPHASH 98068985ee992956c1ae66f490bfef40
SHA256 c71b58fb1e7cc55ebbe5e41a94994aac03bd07272f08946e8f9c8a06f242f8ed
MD5 99639a13de4f5d04f3c7a8f423074402
SHA1 67522f9267f1711295adedf69983ef0d8bc80196
SHA512 674b639cd1ee24af076277cb28849daa557eacf7b4cd6714bde8465beafd8b4a30fb54a0a9a2f57ef47416f150ce968ae621dcb877faaf4c529c87831bd058ab
SSDEEP 1536:KMnj2SOxCG/JGE0JQF19iufHsnRF45rOMsyED8hSrW5ATszLAgi3u2S3pP4nUb:KMnZHJQFrMFIyMZUsAqUD+24pK+
TLSH
T10EC35A237AC74436F0220B764CA9A695977FFE313A21582F71E4774D08FAAC1CC4966B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

86432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey

user32

LoadStringW MessageBoxA CharNextW MessageBoxW LoadStringW CharUpperW

kernel32

lstrcmpiA LoadLibraryA LocalFree LocalAlloc Sleep VirtualFree VirtualAlloc GetACP GetSystemInfo GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess CompareStringW WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle TlsSetValue TlsGetValue LocalAlloc GetModuleHandleW lstrcmpA WriteFile WideCharToMultiByte WaitForSingleObject VirtualQuery SetEvent ResetEvent IsValidLocale GetVersionExW GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleA GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetFileAttributesW GetDiskFreeSpaceW GetCPInfo FreeLibrary EnumSystemLocalesW EnumCalendarInfoW CreateEventW CreateDirectoryW CloseHandle

Name

.text

Size

80KB

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

512B

Virtual Size

154B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__99639a13de4f5d04f3c7a8f423074402

oleaut32

advapi32

user32

kernel32

generic