jaffacakes118__9ee088ae79757a0509ff14151f96d19c

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__9ee088ae79757a0509ff14151f96d19c
Size 136KB
Sample260919-twdpdadn61
SHA256 d2d94bc2e35420cb4526c1e610c3a8bdd3e3ca82d1179fdffa369f2c820495f3
MD5 9ee088ae79757a0509ff14151f96d19c
SHA1 7faeb2b1bc44c5f52b79a942acd3466bbbdda515
SHA512 8a07d67ff13687e803e290d1c5bd00b0e343b23de3c32e4006ed3ef53cb38295ba58d562320798f951c810ef57bdecfd1589effc6e1e4229e4e50eac64b8c904
SSDEEP 3072:8oiNC+5yPSboSPrMG/oW8XwYdOnTSdG6LD:SESbAwAOnTqD/
TLSH
T1BCD39E0639A1C476D19A453D2BA59B35D3FBFD70DDE1A987EB143B8C0D318829E2A313
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__9ee088ae79757a0509ff14151f96d19c

File Explorer

jaffacakes118__9ee088ae79757a0509ff14151f96d19c

.dll 136KB

jaffacakes118__9ee088ae79757a0509ff14151f96d19c

IMPHASH 3741503c6aee6616b5c9b3332d17c493
SHA256 d2d94bc2e35420cb4526c1e610c3a8bdd3e3ca82d1179fdffa369f2c820495f3
MD5 9ee088ae79757a0509ff14151f96d19c
SHA1 7faeb2b1bc44c5f52b79a942acd3466bbbdda515
SHA512 8a07d67ff13687e803e290d1c5bd00b0e343b23de3c32e4006ed3ef53cb38295ba58d562320798f951c810ef57bdecfd1589effc6e1e4229e4e50eac64b8c904
SSDEEP 3072:8oiNC+5yPSboSPrMG/oW8XwYdOnTSdG6LD:SESbAwAOnTqD/
TLSH
T1BCD39E0639A1C476D19A453D2BA59B35D3FBFD70DDE1A987EB143B8C0D318829E2A313
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31557

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

RtlUnwind HeapFree HeapAlloc HeapReAlloc GetCommandLineA ExitProcess TerminateProcess RaiseException HeapSize GetACP HeapCreate VirtualFree VirtualAlloc IsBadWritePtr GetOEMCP GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle GetCPInfo FlushFileBuffers GetCurrentProcess GetProcessVersion GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GetModuleHandleA WritePrivateProfileStringA GlobalFlags GetVersion SetErrorMode TlsGetValue LocalReAlloc TlsSetValue GlobalReAlloc TlsFree GlobalHandle GlobalUnlock GlobalFree TlsAlloc LocalFree LocalAlloc GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA GetCurrentThread GetCurrentThreadId SetLastError GetPrivateProfileStringA GetLocalTime Sleep SetFilePointer WriteFile CloseHandle lstrcatA lstrcpyA LoadLibraryA GetProcAddress HeapDestroy IsDBCSLeadByte lstrcpynA lstrcmpiA LoadLibraryExA GetLastError FindResourceA LoadResource SizeofResource FreeLibrary WideCharToMultiByte GetShortPathNameA lstrlenA MultiByteToWideChar lstrlenW InterlockedDecrement EnterCriticalSection InterlockedIncrement LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection SetHandleCount GetModuleFileNameA

user32

WinHelpA GetCapture GetTopWindow CopyRect GetClientRect AdjustWindowRectEx GetSysColor MapWindowPoints LoadIconA LoadCursorA GetSysColorBrush LoadStringA DestroyMenu GetSubMenu GetMenuItemID DefWindowProcA DestroyWindow CreateWindowExA GetClassLongA SetPropA GetPropA CallWindowProcA RemovePropA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow RegisterWindowMessageA SystemParametersInfoA IsIconic GetWindowPlacement GetSystemMetrics SetFocus ShowWindow SetWindowPos SetWindowLongA GetClassInfoA GetDlgItem GrayStringA DrawTextA TabbedTextOutA ReleaseDC GetDC GetMenuItemCount wsprintfA GetWindowTextA SetWindowTextA ClientToScreen GetWindow GetDlgCtrlID GetWindowRect PtInRect GetClassNameA UnregisterClassA UnhookWindowsHookEx GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA GetParent GetLastActivePopup IsWindowEnabled GetWindowLongA EnableWindow SetCursor RegisterClassA GetMenu SendMessageA PostMessageA PostQuitMessage MessageBoxA CharNextA

gdi32

GetDeviceCaps PtVisible RectVisible TextOutA ExtTextOutA Escape GetObjectA SetBkColor GetStockObject SelectObject RestoreDC GetClipBox ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode SetTextColor CreateBitmap SaveDC DeleteDC DeleteObject

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegDeleteKeyA RegEnumValueA RegQueryInfoKeyA RegSetValueExA RegEnumKeyExA RegOpenKeyExA RegCloseKey RegDeleteValueA RegCreateKeyExA

comctl32

ord17

ole32

CoTaskMemAlloc CoTaskMemRealloc CoCreateInstance CoTaskMemFree

oleaut32

VariantCopy VariantChangeType VariantClear SysStringLen LoadRegTypeLi RegisterTypeLi LoadTypeLi SysAllocString SysFreeString VarUI4FromStr

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__9ee088ae79757a0509ff14151f96d19c

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

ole32

oleaut32

generic