jaffacakes118__9fc87b9963dd32c9b371bae4580001f8

General

Target
jaffacakes118__9fc87b9963dd32c9b371bae4580001f8
Size 481KB
Sample260919-t7vr2ahc99
SHA256 b598e05714e269248393fb8b68dca6cd401ef8c9010e379570274caa94b9a74e
MD5 9fc87b9963dd32c9b371bae4580001f8
SHA1 172f7307e17cfd14b63bd3122a400b1d5bd092d9
SHA512 82f34512cc0c04b75810c62b58d113e9ca31b1678d5757a8cfab6fe023a1fb773309ce3b1b98cb8d66a6046146f8a88266f012ec1b7358947fb85e487d3a2137
SSDEEP 12288:Err6s2U+dcdsS3ZuK44WrfOT5zBf7flP8+XCM+5ppxxrSacEi0/3IWV//2cAhr:Ev6s2U+dcduG5zBTflZyMed/o
TLSH
T1F3A4F9532ACB0CB6C89223F495872776A7389E358517CB6BA754CC36DFA36C0BD69301
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__9fc87b9963dd32c9b371bae4580001f8

File Explorer

jaffacakes118__9fc87b9963dd32c9b371bae4580001f8

.exe 481KB

jaffacakes118__9fc87b9963dd32c9b371bae4580001f8

IMPHASH 321611db01b8543b4f2e87d5c0b37f90
SHA256 b598e05714e269248393fb8b68dca6cd401ef8c9010e379570274caa94b9a74e
MD5 9fc87b9963dd32c9b371bae4580001f8
SHA1 172f7307e17cfd14b63bd3122a400b1d5bd092d9
SHA512 82f34512cc0c04b75810c62b58d113e9ca31b1678d5757a8cfab6fe023a1fb773309ce3b1b98cb8d66a6046146f8a88266f012ec1b7358947fb85e487d3a2137
SSDEEP 12288:Err6s2U+dcdsS3ZuK44WrfOT5zBf7flP8+XCM+5ppxxrSacEi0/3IWV//2cAhr:Ev6s2U+dcduG5zBTflZyMed/o
TLSH
T1F3A4F9532ACB0CB6C89223F495872776A7389E358517CB6BA754CC36DFA36C0BD69301
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCreateKeyExA RegSetValueA RegSetValueExA

kernel32

AddAtomA CopyFileA CreateSemaphoreA ExitProcess FindAtomA FindClose FindFirstFileA FindNextFileA GetAtomNameA GetLastError GetVersionExA GetWindowsDirectoryA InterlockedDecrement InterlockedIncrement ReleaseSemaphore SetLastError SetUnhandledExceptionFilter Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue WaitForSingleObject

msvcrt

_fdopen _read _strdup _write __getmainargs __mb_cur_max __p__environ __p__fmode __set_app_type _assert _cexit _ctype _errno _filelengthi64 _fstati64 _iob _isctype _lseeki64 _onexit _pctype _setmode _strnicmp _vsnprintf abort atexit fclose fflush fgetpos fopen fprintf fread free fsetpos fwrite getc getenv localeconv malloc memchr memcpy memmove memset putc rand setlocale setvbuf signal srand strcat strcmp strcoll strcpy strftime strlen strtod strxfrm time ungetc

user32

CloseWindow FindWindowA

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__9fc87b9963dd32c9b371bae4580001f8

advapi32

kernel32

msvcrt

user32

generic