jaffacakes118__a005b66cd3adda591e9fee191753c14d

General

Target
jaffacakes118__a005b66cd3adda591e9fee191753c14d
Size 97KB
Sample260919-vaycbstclb
SHA256 3241bf1c5fc28d741176afeb563cc35430ef360b9029d81dcb631acd86a59754
MD5 a005b66cd3adda591e9fee191753c14d
SHA1 7b58db30d34ad6b7a1ac52e5dbd10a9cdd5f2243
SHA512 8a0e6954043b94b2c41ee1dd70ea0d1b6517676b354cce4c41813f9ecd8d7646e116024e46a696a96a7c8a1cf811a258f825fddc848945176f33e54ad76a39d3
SSDEEP 1536:ZMltOCdIi8s5LeloMHga0kyqd5SxZLPOUNVjJ6tVe1lN:a354vWqd5SSud1
TLSH
T1A6A3AF1B7480F436C09655B1885CCA515A9EE435AE75D6C337EB2BFFEF211E06B2E201
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__a005b66cd3adda591e9fee191753c14d

File Explorer

jaffacakes118__a005b66cd3adda591e9fee191753c14d

.exe 97KB

jaffacakes118__a005b66cd3adda591e9fee191753c14d

IMPHASH 0641d120c17a37cc740447184fd600b4
SHA256 3241bf1c5fc28d741176afeb563cc35430ef360b9029d81dcb631acd86a59754
MD5 a005b66cd3adda591e9fee191753c14d
SHA1 7b58db30d34ad6b7a1ac52e5dbd10a9cdd5f2243
SHA512 8a0e6954043b94b2c41ee1dd70ea0d1b6517676b354cce4c41813f9ecd8d7646e116024e46a696a96a7c8a1cf811a258f825fddc848945176f33e54ad76a39d3
SSDEEP 1536:ZMltOCdIi8s5LeloMHga0kyqd5SxZLPOUNVjJ6tVe1lN:a354vWqd5SSud1
TLSH
T1A6A3AF1B7480F436C09655B1885CCA515A9EE435AE75D6C337EB2BFFEF211E06B2E201
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14159

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleFileNameExA

kernel32

FreeEnvironmentStringsW ExitProcess GetProcAddress GetModuleHandleA GetCurrentProcess GetLastError FindResourceExA LockResource LoadResource FindResourceA WaitForSingleObject CreateThread SetLastError LoadLibraryA IsBadReadPtr VirtualProtect VirtualAlloc HeapAlloc GetCommandLineA GetStartupInfoA HeapFree RaiseException CloseHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection MultiByteToWideChar ReadFile DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType SetFilePointer RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoA SetEndOfFile GetProcessHeap LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__a005b66cd3adda591e9fee191753c14d

psapi

kernel32

generic