jaffacakes118__a9c65eb4e6db5a0330a79af1700ad359

General

Target
jaffacakes118__a9c65eb4e6db5a0330a79af1700ad359
Size 141KB
Sample260919-xe1pcsen2y
SHA256 c82dd06209f20f6476448c931d2ecb3a39cf14adc5bb34ede6779c7a879c5cfa
MD5 a9c65eb4e6db5a0330a79af1700ad359
SHA1 db2aeecca946566208f9b612649836d1d72b81ef
SHA512 c175b4c3b84247812a4cb637e930a575dbee918bc9a913cf844d9ce865fdc40649e6a76543d642435e45432a77153df3cf464757c007cd9be9b137063d76b715
SSDEEP 1536:5MltOCc4i8s5LeloMHga0kyqd5SeZLPOUNVjJ6tVe1lmOCXMltj0o2MldGYJKur:6Q54vWqd5S/ud1JCUjH2MTDKur
TLSH
T1B1E3CF1E34C0C437C09A45B58869F7417AAEE42467768AC377E72AAFDF211E16B3D242
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__a9c65eb4e6db5a0330a79af1700ad359

File Explorer

jaffacakes118__a9c65eb4e6db5a0330a79af1700ad359

.exe 141KB

jaffacakes118__a9c65eb4e6db5a0330a79af1700ad359

IMPHASH 0641d120c17a37cc740447184fd600b4
SHA256 c82dd06209f20f6476448c931d2ecb3a39cf14adc5bb34ede6779c7a879c5cfa
MD5 a9c65eb4e6db5a0330a79af1700ad359
SHA1 db2aeecca946566208f9b612649836d1d72b81ef
SHA512 c175b4c3b84247812a4cb637e930a575dbee918bc9a913cf844d9ce865fdc40649e6a76543d642435e45432a77153df3cf464757c007cd9be9b137063d76b715
SSDEEP 1536:5MltOCc4i8s5LeloMHga0kyqd5SeZLPOUNVjJ6tVe1lmOCXMltj0o2MldGYJKur:6Q54vWqd5S/ud1JCUjH2MTDKur
TLSH
T1B1E3CF1E34C0C437C09A45B58869F7417AAEE42467768AC377E72AAFDF211E16B3D242
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14159

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleFileNameExA

kernel32

FreeEnvironmentStringsW ExitProcess GetProcAddress GetModuleHandleA GetCurrentProcess GetLastError FindResourceExA LockResource LoadResource FindResourceA WaitForSingleObject CreateThread SetLastError LoadLibraryA IsBadReadPtr VirtualProtect VirtualAlloc HeapAlloc GetCommandLineA GetStartupInfoA HeapFree RaiseException CloseHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection MultiByteToWideChar ReadFile DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType SetFilePointer RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoA SetEndOfFile GetProcessHeap LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__a9c65eb4e6db5a0330a79af1700ad359

psapi

kernel32

generic