jaffacakes118__9e95774464c998d196aa3795d0b91423

General

Target
jaffacakes118__9e95774464c998d196aa3795d0b91423
Size 566KB
Sample260919-tr5bjatane
SHA256 3fdf0bf0dcde945944d12db7b61538ad3e0f2c6647b79be8f9586b6a9a96036e
MD5 9e95774464c998d196aa3795d0b91423
SHA1 6f06e296fec0647ba68fe7d545d5b37f5b2c9a06
SHA512 5fb447471036b736ae8c2aa8b1b6db7140f7594b2166176ec3e110629175d519faa84e476aaf93e7258678715aae9fc80d57340c23f779a4c5ee5804e2b1139e
SSDEEP 12288:KAcBi8xBEoRPHEsuaOZ3brKXV3YcM82XmApcz9fcgqdHx:KAcBLzuPJbrFcCdcxf+Hx
TLSH
T19EC4124BB03D678BFBC881391F3E7476B825F68D4A5C9033B8889D29456D1463C8EDE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__9e95774464c998d196aa3795d0b91423

File Explorer

jaffacakes118__9e95774464c998d196aa3795d0b91423

.exe 566KB

jaffacakes118__9e95774464c998d196aa3795d0b91423

IMPHASH a88f2fe31ccfd3b1d15c68747bdc7f79
SHA256 3fdf0bf0dcde945944d12db7b61538ad3e0f2c6647b79be8f9586b6a9a96036e
MD5 9e95774464c998d196aa3795d0b91423
SHA1 6f06e296fec0647ba68fe7d545d5b37f5b2c9a06
SHA512 5fb447471036b736ae8c2aa8b1b6db7140f7594b2166176ec3e110629175d519faa84e476aaf93e7258678715aae9fc80d57340c23f779a4c5ee5804e2b1139e
SSDEEP 12288:KAcBi8xBEoRPHEsuaOZ3brKXV3YcM82XmApcz9fcgqdHx:KAcBLzuPJbrFcCdcxf+Hx
TLSH
T19EC4124BB03D678BFBC881391F3E7476B825F68D4A5C9033B8889D29456D1463C8EDE9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5520

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetVersion ExitProcess HeapAlloc GetProcessHeap VirtualAlloc Sleep VirtualFree UnmapViewOfFile IsValidCodePage CreateProcessA InterlockedExchange GetACP CloseHandle ReadFile SetFilePointer MapViewOfFile InterlockedCompareExchange HeapSize WideCharToMultiByte GetCommandLineW SizeofResource lstrlenW GetEnvironmentStringsW LCMapStringA GetConsoleCP lstrlenA GetSystemInfo LCMapStringW LeaveCriticalSection CreateFileA TlsSetValue GetFileType CreateEventA CreateFileW GlobalLock DuplicateHandle FindFirstFileW CreateFileMappingA CompareStringA FindFirstFileA CompareStringW GetProcAddress DeleteFileW DeleteFileA GetFileSize GetStartupInfoA FreeLibrary GetCurrentThreadId GetVersionExA TlsAlloc QueryPerformanceCounter GetOEMCP lstrcmpiA SetHandleCount EnterCriticalSection HeapFree WriteConsoleW GlobalAlloc WriteConsoleA TerminateProcess MulDiv SetUnhandledExceptionFilter CreateThread MultiByteToWideChar TlsGetValue UnhandledExceptionFilter lstrcmpiW GetModuleFileNameA FlushFileBuffers IsDebuggerPresent GetModuleFileNameW SetLastError FormatMessageA InterlockedDecrement FindClose InitializeCriticalSection LocalFree GetExitCodeProcess GetStringTypeW HeapReAlloc WriteFile GetStringTypeA LoadLibraryW GetCPInfo GetTempPathA FreeEnvironmentStringsW SetErrorMode LocalAlloc GetLocaleInfoA GetConsoleMode GetCurrentProcess DeleteCriticalSection FreeEnvironmentStringsA HeapDestroy GetDriveTypeA WaitForSingleObject GetCurrentThread GetCommandLineA GetModuleHandleA GetTickCount LoadLibraryA GetCurrentProcessId

user32

LoadIconA CheckMenuItem SetWindowLongA GetWindowRect SetFocus DispatchMessageA RegisterClassA EnableMenuItem GetWindow EnableWindow ShowWindow UpdateWindow SendMessageA GetDC SystemParametersInfoA IsWindowVisible InvalidateRect GetClientRect SetCursor MoveWindow

gdi32

GetStockObject DeleteDC GetDeviceCaps DeleteObject CreateCompatibleDC

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__9e95774464c998d196aa3795d0b91423

kernel32

user32

gdi32

generic