jaffacakes118__26e7eb95752d5a1d83c5ef7150323ab7

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__26e7eb95752d5a1d83c5ef7150323ab7
Size 164KB
Sample260920-1cmw9sem2x
SHA256 fec454e761fdcd3df811298083796b15240b0b5b53b3851d336d051012a44c6c
MD5 26e7eb95752d5a1d83c5ef7150323ab7
SHA1 cddc86533efaa36d1fe420f86a13f054c7c06fa8
SHA512 65c9f4f51299b0bbe848f8141f8553617df429aa9d10d8b54df61bc79f323216fb57b3c498757ee13b1a16e172a42a485bb17cf9fc383fe6e295013c2316b493
SSDEEP 3072:HYmjMcJuWBG8te4tMRiiGTiiiiiiiFiiiiiiGiiiiiiiiiiNDV99kqaqw6VYN:HYYMcJuEG8t77dkqvw6C
TLSH
T1B8F39C3BAF61312FE86D05F20A5502611F563CA68A3B25D7BA84C52D5860CF8F7B7E4C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__26e7eb95752d5a1d83c5ef7150323ab7

File Explorer

jaffacakes118__26e7eb95752d5a1d83c5ef7150323ab7

.exe 164KB

jaffacakes118__26e7eb95752d5a1d83c5ef7150323ab7

IMPHASH cdf140c4eb225839d9cec29890af9950
SHA256 fec454e761fdcd3df811298083796b15240b0b5b53b3851d336d051012a44c6c
MD5 26e7eb95752d5a1d83c5ef7150323ab7
SHA1 cddc86533efaa36d1fe420f86a13f054c7c06fa8
SHA512 65c9f4f51299b0bbe848f8141f8553617df429aa9d10d8b54df61bc79f323216fb57b3c498757ee13b1a16e172a42a485bb17cf9fc383fe6e295013c2316b493
SSDEEP 3072:HYmjMcJuWBG8te4tMRiiGTiiiiiiiFiiiiiiGiiiiiiiiiiNDV99kqaqw6VYN:HYYMcJuEG8t77dkqvw6C
TLSH
T1B8F39C3BAF61312FE86D05F20A5502611F563CA68A3B25D7BA84C52D5860CF8F7B7E4C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20668

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress LoadLibraryA TerminateProcess WaitForSingleObject CreateProcessA GetLastError DuplicateHandle GetCurrentProcess FreeLibrary WriteFile CreateFileA WinExec GetModuleFileNameA GetStartupInfoA GetModuleHandleA WideCharToMultiByte Sleep GetVersionExA GetSystemDirectoryA GetFileAttributesExA SetFileTime CloseHandle OpenProcess

user32

GetDesktopWindow DispatchMessageA TranslateMessage GetMessageA ShowWindow CreateWindowExA SendMessageTimeoutA RegisterWindowMessageA GetClassNameA PostMessageA EnumChildWindows GetWindowThreadProcessId EnumWindows RegisterClassExA DefWindowProcA PostQuitMessage

advapi32

RegQueryValueExA OpenSCManagerA CreateServiceA DeleteService OpenServiceA StartServiceA ConvertSidToStringSidA LookupAccountNameA GetUserNameA RegCloseKey RegOpenKeyExA CloseServiceHandle

shell32

SHGetSpecialFolderPathA

ole32

CoInitialize CoUninitialize

oleaut32

SysFreeString VariantClear

shlwapi

SHGetValueA SHSetValueA

msvcrt

__CxxFrameHandler _stricmp _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit fopen fwrite fflush fclose time srand ??2@YAPAXI@Z ??3@YAXPAX@Z _strlwr sprintf _access rand wcslen atoi strchr strstr

dbghelp

ImageNtHeader

Name

.text

Size

20KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

116KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

mdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

edata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

cdata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

idata

Size

4KB

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__26e7eb95752d5a1d83c5ef7150323ab7

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

msvcrt

dbghelp

generic