jaffacakes118__a77e07db888ac9af4a4643c8164a3fdc

General

Target
jaffacakes118__a77e07db888ac9af4a4643c8164a3fdc
Size 32KB
Sample260919-wya3daad39
SHA256 25544ec6fa9c2f44d0d2588210cf4581a5ebdbf71541164a4ad7a1309263fe6b
MD5 a77e07db888ac9af4a4643c8164a3fdc
SHA1 82886163f703bf42559198aa31a4718483a09310
SHA512 413ecab96a66ae0ff5b2c1d2c303cb85e605d52e1e03a7c38e0148876c625ce63f86a57ff99a868e6dd01e8131c062f91727c25eff0d91cec69969068b4de020
SSDEEP 768:VgWrDLqyXOEpyytAHSH0gvSccje6JN9/r4FQnS:q+GViAc02S9e0/r4yS
TLSH
T10AE2C02090A5ABBBFD170CB463C67F544C8EEEE682D75BD31C8B338E2236550547845D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__a77e07db888ac9af4a4643c8164a3fdc

File Explorer

jaffacakes118__a77e07db888ac9af4a4643c8164a3fdc

.dll 32KB

jaffacakes118__a77e07db888ac9af4a4643c8164a3fdc

IMPHASH 6387c66f61e327010d859341f045b09e
SHA256 25544ec6fa9c2f44d0d2588210cf4581a5ebdbf71541164a4ad7a1309263fe6b
MD5 a77e07db888ac9af4a4643c8164a3fdc
SHA1 82886163f703bf42559198aa31a4718483a09310
SHA512 413ecab96a66ae0ff5b2c1d2c303cb85e605d52e1e03a7c38e0148876c625ce63f86a57ff99a868e6dd01e8131c062f91727c25eff0d91cec69969068b4de020
SSDEEP 768:VgWrDLqyXOEpyytAHSH0gvSccje6JN9/r4FQnS:q+GViAc02S9e0/r4yS
TLSH
T10AE2C02090A5ABBBFD170CB463C67F544C8EEEE682D75BD31C8B338E2236550547845D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4624

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

G:\dpVuveh\skqjY\VgsDnf\nqajn.pdb

Name

.text

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.INIT

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1024B

Virtual Size

748B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

876B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jaffacakes118__a77e07db888ac9af4a4643c8164a3fdc

ntoskrnl.exe

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__a77e07db888ac9af4a4643c8164a3fdc

ntoskrnl.exe

generic