jaffacakes118__9fef169849fe32da1aa202b1baecbf43

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__9fef169849fe32da1aa202b1baecbf43
Size 73KB
Sample260919-t9rhdshd39
SHA256 78bcc4a30dbe2951aeff6d999fdccce738634b77e4cf83dd7d4f01b32fb59dc0
MD5 9fef169849fe32da1aa202b1baecbf43
SHA1 2b039951dae16ce4b28925effad82e915409a3e3
SHA512 585bfe1507c1de80307a3d2e33c7add81ce4f664b28173ea0e3f9c42c65486366f4e8bcc95117ec6adea718fa772a644206a3ffb7bdbaa0c4b297b101e9a7b41
SSDEEP 1536:Y6Bkft9nSGN+WpCVG+uyo8XWsV5Urq0HvXPVago8Wq33rhtr:rU9uWpCY5gWS54Zf9ago8h33rhtr
TLSH
T1BD739E03B1D1C0B3D99141B314F94F39EF3EF8B602269683A72CDF291D166959F2A297
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__9fef169849fe32da1aa202b1baecbf43

File Explorer

jaffacakes118__9fef169849fe32da1aa202b1baecbf43

.exe 73KB

jaffacakes118__9fef169849fe32da1aa202b1baecbf43

IMPHASH d7822834b92caa602a028c1f852417b9
SHA256 78bcc4a30dbe2951aeff6d999fdccce738634b77e4cf83dd7d4f01b32fb59dc0
MD5 9fef169849fe32da1aa202b1baecbf43
SHA1 2b039951dae16ce4b28925effad82e915409a3e3
SHA512 585bfe1507c1de80307a3d2e33c7add81ce4f664b28173ea0e3f9c42c65486366f4e8bcc95117ec6adea718fa772a644206a3ffb7bdbaa0c4b297b101e9a7b41
SSDEEP 1536:Y6Bkft9nSGN+WpCVG+uyo8XWsV5Urq0HvXPVago8Wq33rhtr:rU9uWpCY5gWS54Zf9ago8h33rhtr
TLSH
T1BD739E03B1D1C0B3D99141B314F94F39EF3EF8B602269683A72CDF291D166959F2A297
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28002

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileTime CreateFileA DeleteFileA LocalFree SetFileTime WriteFile CopyFileA GetCommandLineA GetVersionExA GetCurrentProcessId FormatMessageA LeaveCriticalSection GetModuleFileNameA EnterCriticalSection CreateThread ResetEvent WaitForMultipleObjects WaitForSingleObject SetEvent CloseHandle DeleteCriticalSection GetLastError CreateEventA Sleep MoveFileExA LoadLibraryA RtlUnwind GetCurrentProcess SetEnvironmentVariableA CompareStringW CompareStringA LCMapStringW LCMapStringA SetEndOfFile GetStringTypeW GetProcAddress GetOEMCP GetACP GetCPInfo CreateProcessA GetExitCodeProcess GetFileAttributesA InitializeCriticalSection GetStringTypeA IsBadCodePtr IsBadReadPtr SetUnhandledExceptionFilter MultiByteToWideChar FlushFileBuffers SetStdHandle ExitProcess TerminateProcess IsBadWritePtr GetTimeZoneInformation GetSystemTime GetLocalTime HeapReAlloc GetModuleHandleA GetStartupInfoA GetVersion HeapFree SetHandleCount GetStdHandle GetFileType HeapAlloc ReadFile SetFilePointer GetEnvironmentStrings HeapSize WideCharToMultiByte UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree VirtualAlloc

user32

MessageBoxA

advapi32

RegCreateKeyExA RegCloseKey RegQueryValueExA RegOpenKeyExA RegDeleteValueA StartServiceCtrlDispatcherA ControlService DeleteService OpenServiceA CreateServiceA CloseServiceHandle OpenSCManagerA RegisterServiceCtrlHandlerA RegSetValueExA SetServiceStatus

ole32

CoCreateGuid

wsock32

setsockopt gethostbyname ioctlsocket gethostbyaddr htons socket connect send WSACleanup recv WSAGetLastError closesocket

wininet

InternetOpenA InternetSetOptionA InternetOpenUrlA InternetCloseHandle HttpQueryInfoA InternetReadFile InternetGetConnectedState

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__9fef169849fe32da1aa202b1baecbf43

kernel32

user32

advapi32

ole32

wsock32

wininet

generic