jaffacakes118__a23deaedb142293851fa38fe00653f26

General

Target
jaffacakes118__a23deaedb142293851fa38fe00653f26
Size 141KB
Sample260919-vshplateph
SHA256 bd5f8a92b979b1148f1089125339c848fe5154d38e112ae9dc1bac6cb227cbff
MD5 a23deaedb142293851fa38fe00653f26
SHA1 e3d9d15cb2ccce4df95b509e45ff27586826f413
SHA512 b1f2d58696b777fbac29bed155918dcf754c7e7815801471d25913afe89850b8e0ffc835d3915b8135fe85d4bcba559a8f19c094150fe216322d07fb9cbe9423
SSDEEP 1536:ZMltOCdIi8s5LeloMHga0kyqd5SFZLPOUNVjJ6tVe1lN+Mltj0o2MldGYJK+:a354vWqd5S+ud1ljH2MTDK+
TLSH
T136E3CF1E34C0E837C09655B5886CF7517A9EE8246B7686C337E62ABFDF211D16B3D102
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__a23deaedb142293851fa38fe00653f26

File Explorer

jaffacakes118__a23deaedb142293851fa38fe00653f26

.exe 141KB

jaffacakes118__a23deaedb142293851fa38fe00653f26

IMPHASH 0641d120c17a37cc740447184fd600b4
SHA256 bd5f8a92b979b1148f1089125339c848fe5154d38e112ae9dc1bac6cb227cbff
MD5 a23deaedb142293851fa38fe00653f26
SHA1 e3d9d15cb2ccce4df95b509e45ff27586826f413
SHA512 b1f2d58696b777fbac29bed155918dcf754c7e7815801471d25913afe89850b8e0ffc835d3915b8135fe85d4bcba559a8f19c094150fe216322d07fb9cbe9423
SSDEEP 1536:ZMltOCdIi8s5LeloMHga0kyqd5SFZLPOUNVjJ6tVe1lN+Mltj0o2MldGYJK+:a354vWqd5S+ud1ljH2MTDK+
TLSH
T136E3CF1E34C0E837C09655B5886CF7517A9EE8246B7686C337E62ABFDF211D16B3D102
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14159

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleFileNameExA

kernel32

FreeEnvironmentStringsW ExitProcess GetProcAddress GetModuleHandleA GetCurrentProcess GetLastError FindResourceExA LockResource LoadResource FindResourceA WaitForSingleObject CreateThread SetLastError LoadLibraryA IsBadReadPtr VirtualProtect VirtualAlloc HeapAlloc GetCommandLineA GetStartupInfoA HeapFree RaiseException CloseHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection MultiByteToWideChar ReadFile DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType SetFilePointer RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoA SetEndOfFile GetProcessHeap LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__a23deaedb142293851fa38fe00653f26

psapi

kernel32

generic