jaffacakes118__a19891e5b381cb5f17d33cf25153681f

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__a19891e5b381cb5f17d33cf25153681f
Size 108KB
Sample260919-vm5beavvft
SHA256 ba44fe3f1834beaef6148df0b2b41a5a386384beed0098801a0865154b7edc20
MD5 a19891e5b381cb5f17d33cf25153681f
SHA1 b08d1c99e888a869a3da4383c331a8d5af388792
SHA512 14505b95ac87a2f3c56db0fa60eb9290f1cc1637c42160e7ce0df29c0b1524bf5515298fc934ab97a08271e37ab66ec9c208050a7512a16a5c11d7ec2e1e06db
SSDEEP 1536:zoBJvNmH6rNvxi0Qc3dIGAT01mMGlwVqCIEnP:zozVZvJm01mBCqTEnP
TLSH
T158B36FC9A6B6C323E07D0D3F4521169137FDFFE6E06A552FCA0226396AB01D54A2072F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__a19891e5b381cb5f17d33cf25153681f

File Explorer

jaffacakes118__a19891e5b381cb5f17d33cf25153681f

.exe 108KB

jaffacakes118__a19891e5b381cb5f17d33cf25153681f

IMPHASH b3fe98783c971443e9a7e6cadf916a81
SHA256 ba44fe3f1834beaef6148df0b2b41a5a386384beed0098801a0865154b7edc20
MD5 a19891e5b381cb5f17d33cf25153681f
SHA1 b08d1c99e888a869a3da4383c331a8d5af388792
SHA512 14505b95ac87a2f3c56db0fa60eb9290f1cc1637c42160e7ce0df29c0b1524bf5515298fc934ab97a08271e37ab66ec9c208050a7512a16a5c11d7ec2e1e06db
SSDEEP 1536:zoBJvNmH6rNvxi0Qc3dIGAT01mMGlwVqCIEnP:zozVZvJm01mBCqTEnP
TLSH
T158B36FC9A6B6C323E07D0D3F4521169137FDFFE6E06A552FCA0226396AB01D54A2072F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

36269

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

HttpQueryInfoW InternetCrackUrlA InternetCanonicalizeUrlA InternetCloseHandle InternetOpenUrlW InternetOpenW InternetOpenUrlA InternetCanonicalizeUrlW InternetReadFile

ole32

CoInitialize CoCreateInstance

shell32

SHBrowseForFolderA SHGetPathFromIDListA SHGetSpecialFolderLocation

ws2_32

gethostbyname WSAStartup WSACleanup

shlwapi

PathGetCharTypeW

kernel32

LoadLibraryA ReadFile GetFileSize CreateFileMappingA MapViewOfFile RtlMoveMemory RtlZeroMemory VirtualProtect lstrcmpA lstrcpynA lstrlenA LockResource LoadResource CreateProcessA lstrcatA Sleep GetVersionExA ExitProcess CloseHandle GetModuleFileNameA GetDiskFreeSpaceExA CreateDirectoryA CreateFileA SystemTimeToFileTime GetSystemTime CreateMutexA MoveFileA DeleteFileA OutputDebugStringA CopyFileA GetWindowsDirectoryA lstrcpyA MulDiv FlushFileBuffers WriteFile SetFilePointer GetLastError ExitThread TerminateThread CreateThread SizeofResource FreeLibrary RtlUnwind CompareStringA InterlockedExchange GetModuleHandleA GetSystemDirectoryA SetLastError HeapAlloc GetProcessHeap HeapFree GetStartupInfoA GetCommandLineA UnmapViewOfFile GetTickCount

user32

CharLowerA SendMessageA GetDlgItem CreateDialogParamA GetMessageA IsDialogMessageA TranslateMessage DispatchMessageA SetDlgItemTextA GetDlgItemTextA SetFocus GetDC InvalidateRect SetWindowPos ShowWindow SetForegroundWindow IsWindowVisible EnableMenuItem GetSystemMenu

gdi32

CreateFontIndirectA GetDeviceCaps

advapi32

RegSetValueExA RegCloseKey RegDeleteValueA RegQueryValueExA RegCreateKeyExA RegDeleteKeyA OpenSCManagerW RegFlushKey RegOpenKeyExA CloseServiceHandle

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__a19891e5b381cb5f17d33cf25153681f

wininet

ole32

shell32

ws2_32

shlwapi

kernel32

user32

gdi32

advapi32

generic