jaffacakes118__27de2d004ff46dd915fad8916178882c

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__27de2d004ff46dd915fad8916178882c
Size 57KB
Sample260920-1wed8stvbx
SHA256 351f401038180629d5bfd68b1ee3f9833a434bd8a3563cfa66373251fb8038a9
MD5 27de2d004ff46dd915fad8916178882c
SHA1 88990a991d9b3738678e999e9debca6e2702e5d7
SHA512 16c9ba42038c7dc868d539fb0cfd66f30037a706f5ac6d49111b3764315e7d56406da6a86e2060f1dea8cd8d4e6ff8a21b68645a2d21b595e5547bd76fd0254f
SSDEEP 1536:1m5Wvd2ikMbL2ffryqUUUTCoGlcL/Sx8WFhpF:1mod2zMueqUU068WFbF
TLSH
T176430713EB591287D42E1F3510B90B19E725953D3F5E878B15ACFA3DEA903C22E263C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__27de2d004ff46dd915fad8916178882c

File Explorer

jaffacakes118__27de2d004ff46dd915fad8916178882c

.exe 57KB

jaffacakes118__27de2d004ff46dd915fad8916178882c

IMPHASH d03dca8a272c398e2e383f038ad17382
SHA256 351f401038180629d5bfd68b1ee3f9833a434bd8a3563cfa66373251fb8038a9
MD5 27de2d004ff46dd915fad8916178882c
SHA1 88990a991d9b3738678e999e9debca6e2702e5d7
SHA512 16c9ba42038c7dc868d539fb0cfd66f30037a706f5ac6d49111b3764315e7d56406da6a86e2060f1dea8cd8d4e6ff8a21b68645a2d21b595e5547bd76fd0254f
SSDEEP 1536:1m5Wvd2ikMbL2ffryqUUUTCoGlcL/Sx8WFhpF:1mod2zMueqUU068WFbF
TLSH
T176430713EB591287D42E1F3510B90B19E725953D3F5E878B15ACFA3DEA903C22E263C9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4308

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcirt

?precision@ios@@QAEHH@Z ?getline@istream@@QAEAAV1@PADHD@Z ??0istrstream@@QAE@ABV0@@Z ?init@ios@@IAEXPAVstreambuf@@@Z ??_8strstream@@7Bistream@@@ ??_Gexception@@UAEPAXI@Z ??4istream@@IAEAAV0@PAVstreambuf@@@Z ??0filebuf@@QAE@HPADH@Z ??_7istrstream@@6B@ ??4ostream@@IAEAAV0@ABV0@@Z ??5istream@@QAEAAV0@P6AAAVios@@AAV1@@Z@Z ?unbuffered@streambuf@@IBEHXZ ?setlock@streambuf@@QAEXXZ ?setbuf@ifstream@@QAEPAVstreambuf@@PADH@Z ?floatfield@ios@@2JB ?open@filebuf@@QAEPAV1@PBDHH@Z ?write@ostream@@QAEAAV1@PBDH@Z ??6ostream@@QAEAAV0@M@Z ?dec@@YAAAVios@@AAV1@@Z ?close@filebuf@@QAEPAV1@XZ ?fill@ios@@QAEDD@Z ??1istream@@UAE@XZ ??_Difstream@@QAEXXZ ??5istream@@QAEAAV0@AAO@Z ?delbuf@ios@@QAEXH@Z ?str@ostrstream@@QAEPADXZ ??0fstream@@QAE@PBDHH@Z ?setmode@ofstream@@QAEHH@Z

msvcrt40

?rdbuf@stdiostream@@QBEPAVstdiobuf@@XZ ldiv _mbsnbcpy _wspawnve _lrotl _ismbcprint ?basefield@ios@@2JB _mbslwr __getmainargs _unloaddll fwscanf ??0ifstream@@QAE@ABV0@@Z calloc ?sync@strstreambuf@@UAEHXZ _mbsnicmp sprintf _initterm ?unlockbuf@ios@@QAAXXZ _adj_fdiv_m32 _errno _cprintf

msvcrt20

__wgetmainargs _execve wcscoll _CIsin remove _mbsicoll _ftol _futime _tzset ??_8ostrstream@@7B@ ??_Gistrstream@@UAEPAXI@Z ?is_open@ofstream@@QBEHXZ _CIexp ?putback@istream@@QAEAAV1@D@Z ?rdbuf@stdiostream@@QBEPAVstdiobuf@@XZ __iscsym ?unbuffered@streambuf@@IAEXH@Z _rotl iswpunct _adj_fdivr_m32 wcsspn tolower _ungetch _safe_fprem1

olecli32

LeEnumFormat SetNextNetDrive ErrShow OleRegisterClientDoc LeQueryOpen MfCallbackFunc LeEqual OleCreate OleSetLinkUpdateOptions OleClose DefCreateLinkFromFile GenGetData LeQueryProtocol OleQueryType ErrExecute OleCreateFromFile LeChangeData GenDraw ErrActivate DibGetData DibRelease MfCopy PbEnumFormats

cfgmgr32

CM_Set_Class_Registry_PropertyW CM_Query_And_Remove_SubTree_ExW CM_Get_Res_Des_Data_Size_Ex CM_Set_HW_Prof_Flags_ExW CM_Request_Eject_PC CM_Unregister_Device_InterfaceA CM_Uninstall_DevNode CM_Get_DevNode_Status_Ex CM_Enumerate_Classes_Ex CM_Disable_DevNode_Ex CM_Get_Device_IDW CMP_WaitServicesAvailable CM_Query_Resource_Conflict_List CMP_Init_Detection CM_Query_Arbitrator_Free_Size CM_Create_DevNodeW CM_Get_HW_Prof_FlagsW CM_Merge_Range_List CM_Unregister_Device_Interface_ExA CM_Create_DevNode_ExW CM_Get_Device_ID_Size CM_Locate_DevNodeW CM_Get_Res_Des_Data_Size CM_Set_DevNode_Registry_Property_ExW CM_Uninstall_DevNode_Ex CM_Get_Class_Name_ExA

kernel32

GetVolumePathNameW HeapCreate GetCommandLineA GetAtomNameA EnumLanguageGroupLocalesA SetCalendarInfoA GetNamedPipeHandleStateA LoadLibraryA DuplicateConsoleHandle ReleaseSemaphore lstrcmpiA ReplaceFileA LZInit GetVersionExW FindCloseChangeNotification SetConsoleMode SetConsoleMaximumWindowSize SetConsoleCursorMode QueryPerformanceFrequency VerSetConditionMask MulDiv VirtualAlloc GetSystemTimeAsFileTime IsBadReadPtr

glmf32

glsEndCapture glsCaptureFunc glsNumd glsEnumString glsHeaderLayeri glsGetStreamCRC32 glsGetLayeri glsNumdv glsBeginGLS glsGetGLRCi glsPixelSetup glsGetCaptureDispatchTable glsCallStream glsUpdateCaptureExecTable glsNumiv glsNums glsChannel glsCopyStream glsCallArray glsGetCommandAttrib glsNumb

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__27de2d004ff46dd915fad8916178882c

msvcirt

msvcrt40

msvcrt20

olecli32

cfgmgr32

kernel32

glmf32

generic