jaffacakes118__af1d3f378e55bb1441180288355d83c8

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__af1d3f378e55bb1441180288355d83c8
Size 765KB
Sample260919-ypvrjabe73
SHA256 7f91e583a13f818a738227193ce2b0460f911755180d1916a41af1e407ef5801
MD5 af1d3f378e55bb1441180288355d83c8
SHA1 ba97b6a19ac54a9e534cdfb5a9fc273598fc1c79
SHA512 b94bc93a1ee18e7f36a2f2dcd01bcb0666e63156be8dd27816c2746176e0c5c65d4333f5cc75f20a9505ecde5f5b09e3fe60209b68ac5006661303ab3bdaef8d
SSDEEP 12288:LxzusQgXU9jyfU8+uCkF+4nTyL3/F5CKq/y7hQvDnAKJMToL:Lti8XfUHMF+4nOLPF0yqbAukoL
TLSH
T1F8F423167AE08D77C050037921C78B937BB0FDE059EEA7B5FB928DA11CA918D617231B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__af1d3f378e55bb1441180288355d83c8

File Explorer

jaffacakes118__af1d3f378e55bb1441180288355d83c8

.exe 765KB

jaffacakes118__af1d3f378e55bb1441180288355d83c8

IMPHASH 4ceb602103452d26857e3f79649c2323
SHA256 7f91e583a13f818a738227193ce2b0460f911755180d1916a41af1e407ef5801
MD5 af1d3f378e55bb1441180288355d83c8
SHA1 ba97b6a19ac54a9e534cdfb5a9fc273598fc1c79
SHA512 b94bc93a1ee18e7f36a2f2dcd01bcb0666e63156be8dd27816c2746176e0c5c65d4333f5cc75f20a9505ecde5f5b09e3fe60209b68ac5006661303ab3bdaef8d
SSDEEP 12288:LxzusQgXU9jyfU8+uCkF+4nTyL3/F5CKq/y7hQvDnAKJMToL:Lti8XfUHMF+4nOLPF0yqbAukoL
TLSH
T1F8F423167AE08D77C050037921C78B937BB0FDE059EEA7B5FB928DA11CA918D617231B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23401

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

FreeSid AllocateAndInitializeSid EqualSid GetTokenInformation OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA RegCloseKey RegDeleteValueA RegOpenKeyExA RegSetValueExA RegQueryValueExA RegCreateKeyExA RegQueryInfoKeyA

kernel32

LocalFree LocalAlloc GetLastError GetCurrentProcess GetModuleFileNameA lstrlenA GetSystemDirectoryA RemoveDirectoryA FindClose FindNextFileA DeleteFileA SetFileAttributesA lstrcmpA FindFirstFileA lstrcatA lstrcpyA _lclose _llseek _lopen WritePrivateProfileStringA GetWindowsDirectoryA CreateDirectoryA GetFileAttributesA ExpandEnvironmentStringsA IsDBCSLeadByte GetShortPathNameA GetPrivateProfileStringA GetPrivateProfileIntA lstrcmpiA GetProcAddress GlobalUnlock GlobalLock GlobalAlloc FreeResource CloseHandle LoadResource SizeofResource FindResourceA ReadFile WriteFile SetFilePointer SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime SetCurrentDirectoryA GetTempFileNameA ExitProcess CreateFileA LoadLibraryExA lstrcpynA GetModuleHandleA GetVolumeInformationA FormatMessageA GetCurrentDirectoryA GetVersionExA GetExitCodeProcess WaitForSingleObject CreateProcessA GetTempPathA GetSystemInfo CreateMutexA SetEvent CreateEventA CreateThread ResetEvent TerminateThread GetDriveTypeA GetStartupInfoA GetCommandLineA LockResource LoadLibraryA GetDiskFreeSpaceA MulDiv EnumResourceLanguagesA FreeLibrary GlobalFree

gdi32

GetDeviceCaps

user32

ExitWindowsEx wsprintfA CharNextA CharUpperA CharPrevA SetWindowLongA GetWindowLongA CallWindowProcA DispatchMessageA MsgWaitForMultipleObjects PeekMessageA SendMessageA SetWindowPos ReleaseDC GetDC GetWindowRect SendDlgItemMessageA GetDlgItem SetForegroundWindow SetWindowTextA MessageBoxA DialogBoxIndirectParamA ShowWindow EnableWindow GetDlgItemTextA EndDialog GetDesktopWindow MessageBeep SetDlgItemTextA LoadStringA GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__af1d3f378e55bb1441180288355d83c8

advapi32

kernel32

gdi32

user32

comctl32

version

generic