jaffacakes118__9e4ef67bb7fb24cf0b44fe4fdbf9f3b2

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__9e4ef67bb7fb24cf0b44fe4fdbf9f3b2
Size 296KB
Sample260919-tnr7sshb24
SHA256 1ad696bb4f6337b2cac2373a7b7c75ce28912a97fa51b6662a57ec6c89f1643c
MD5 9e4ef67bb7fb24cf0b44fe4fdbf9f3b2
SHA1 7a12ef0fc0a238117ff495fc84ea53c3caa4e60a
SHA512 4103518481b712517d4ab1f77994fc7770297661f53809e7f6a277b442edfc61cd63c0dfd8c86a5f797981dc819ee6ef6aca87513ed7c3c9bbaec7589592b9f9
SSDEEP 6144:qoUVAuuDR0hitxXmgdJMIfL7akgB4seH:q+DRxtxXpIIfL7akgS
TLSH
T16B548C12F381C1B9D5DD0539456A937656FEB9644BE0CAC3F7A82A7E8E322C10B3538D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__9e4ef67bb7fb24cf0b44fe4fdbf9f3b2

File Explorer

jaffacakes118__9e4ef67bb7fb24cf0b44fe4fdbf9f3b2

.dll 296KB

jaffacakes118__9e4ef67bb7fb24cf0b44fe4fdbf9f3b2

IMPHASH 797044d58fc2c95c7914cbd922f670f9
SHA256 1ad696bb4f6337b2cac2373a7b7c75ce28912a97fa51b6662a57ec6c89f1643c
MD5 9e4ef67bb7fb24cf0b44fe4fdbf9f3b2
SHA1 7a12ef0fc0a238117ff495fc84ea53c3caa4e60a
SHA512 4103518481b712517d4ab1f77994fc7770297661f53809e7f6a277b442edfc61cd63c0dfd8c86a5f797981dc819ee6ef6aca87513ed7c3c9bbaec7589592b9f9
SSDEEP 6144:qoUVAuuDR0hitxXmgdJMIfL7akgB4seH:q+DRxtxXpIIfL7akgS
TLSH
T16B548C12F381C1B9D5DD0539456A937656FEB9644BE0CAC3F7A82A7E8E322C10B3538D
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

148221

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

wininet

HttpQueryInfoA InternetCrackUrlA InternetQueryOptionA InternetCloseHandle HttpSendRequestA HttpOpenRequestA InternetConnectA InternetOpenA InternetReadFile InternetGetConnectedState HttpAddRequestHeadersA

shlwapi

StrStrA StrNCatA PathFileExistsA StrRChrA wvnsprintfA StrCmpNIA StrStrIA StrToIntA wnsprintfA

rpcrt4

UuidToStringA UuidCreate

comctl32

InitCommonControlsEx

kernel32

GetProcessHeap lstrcmpiA TlsFree TlsAlloc GetModuleFileNameA GetCurrentProcess GetProcAddress GetModuleHandleA GetVersionExA GetTempPathA GetPrivateProfileStringA MultiByteToWideChar WideCharToMultiByte lstrlenW GetLastError lstrlenA WinExec IsDBCSLeadByte EnterCriticalSection LeaveCriticalSection FreeLibrary SizeofResource LoadResource FindResourceA LoadLibraryExA GetModuleHandleW SetThreadLocale GetThreadLocale LockResource FindResourceExA HeapFree CloseHandle WriteFile CreateFileA TerminateThread GetTickCount TlsSetValue TlsGetValue ReleaseMutex SleepEx lstrcpyA WaitForSingleObject CreateMutexA Sleep CreateThread HeapReAlloc ResetEvent CreateEventA GetOEMCP OpenEventA HeapAlloc VirtualAlloc VirtualProtect LoadLibraryA VirtualFree MapViewOfFile CreateFileMappingA OpenFileMappingA Process32Next Process32First CreateToolhelp32Snapshot GlobalFree GlobalAlloc GetCurrentProcessId GetExitCodeProcess CreateProcessA DeleteFileA LocalFree ExitProcess SetLastError GetCPInfo LCMapStringW LCMapStringA GetCommandLineA GetCurrentThreadId IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime VirtualQuery GetSystemInfo RtlUnwind HeapSize HeapDestroy GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW GetEnvironmentStringsW IsValidCodePage HeapCreate GetStdHandle InterlockedDecrement InterlockedIncrement lstrcpynA DeleteCriticalSection InitializeCriticalSection RaiseException FlushInstructionCache GetACP GetStringTypeA GetStringTypeW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers GetLocaleInfoA SetEvent FreeEnvironmentStringsW QueryPerformanceCounter

user32

DispatchMessageA SystemParametersInfoA SetWindowPos DefWindowProcA FindWindowA SendMessageA SetWindowLongA GetWindowLongA PostMessageA TranslateMessage KillTimer GetWindowDC ReleaseDC CharNextW GetClientRect GetWindowRect GetCursorPos SetCursorPos mouse_event CharNextA GetMessageA SetActiveWindow CreateWindowExA GetActiveWindow RegisterClassExA LoadIconA LoadCursorA GetSysColorBrush UpdateWindow ShowWindow IsWindow SetTimer MessageBoxA

gdi32

CreateCompatibleDC CreateDIBSection SelectObject BitBlt DeleteObject DeleteDC GetPixel

advapi32

GetLengthSid CreateProcessAsUserA ConvertStringSecurityDescriptorToSecurityDescriptorW GetSecurityDescriptorSacl SetNamedSecurityInfoA OpenSCManagerA OpenServiceA QueryServiceStatus CloseServiceHandle RegEnumKeyExA RegQueryInfoKeyA RegSetValueExA RegCreateKeyExA RegDeleteValueA RegDeleteKeyA RegOpenKeyExA RegCreateKeyA RegQueryValueExA RegCloseKey ConvertStringSidToSidW DuplicateTokenEx OpenProcessToken SetTokenInformation

shell32

SHGetFolderPathA

ole32

CoTaskMemRealloc CoTaskMemFree CoCreateInstance CoUninitialize CoInitialize StringFromGUID2 CoSetProxyBlanket CoInitializeSecurity CoInitializeEx OleSetContainedObject OleCreate OleUninitialize OleInitialize CoTaskMemAlloc

oleaut32

VariantInit VarUI4FromStr SysStringLen SysFreeString LoadRegTypeLi LoadTypeLi SysAllocString UnRegisterTypeLi RegisterTypeLi VariantClear SafeArrayDestroy SafeArrayAccessData SafeArrayCreate SysAllocStringLen

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__9e4ef67bb7fb24cf0b44fe4fdbf9f3b2

wininet

shlwapi

rpcrt4

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

generic