jaffacakes118__29dcf7385777d95c3bd5eaaa7a2dcc6b

General

Target
jaffacakes118__29dcf7385777d95c3bd5eaaa7a2dcc6b
Size 204KB
Sample260920-24fspsvsfw
SHA256 6611a742becaa47302a41eccdcf8e17f973af175cb10d5b1009cbda6b6f292f1
MD5 29dcf7385777d95c3bd5eaaa7a2dcc6b
SHA1 396645a04587dcfec1b39680ef9724c6b651489f
SHA512 4325b2812f6476fb388c7357350d82e3c7e8677dbd0c3b3b01d50c3cddb2c278c53613212d6643cd2212b96885daba8710519d2c4d358dbf6ec1f7767fd1904f
SSDEEP 6144:i10B0WUkNEbE94ErY/MVqGufINswegE65NhM:i10ByRMVVufINsSx3G
TLSH
T10B14E05C43900EB6D95207B788AAD39C7E410DA9CFD4D3A8901365221EF271E8FFF91A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__29dcf7385777d95c3bd5eaaa7a2dcc6b

File Explorer

jaffacakes118__29dcf7385777d95c3bd5eaaa7a2dcc6b

.dll 204KB

jaffacakes118__29dcf7385777d95c3bd5eaaa7a2dcc6b

IMPHASH 65ef0731ba670b7bdf21d71f9d324aea
SHA256 6611a742becaa47302a41eccdcf8e17f973af175cb10d5b1009cbda6b6f292f1
MD5 29dcf7385777d95c3bd5eaaa7a2dcc6b
SHA1 396645a04587dcfec1b39680ef9724c6b651489f
SHA512 4325b2812f6476fb388c7357350d82e3c7e8677dbd0c3b3b01d50c3cddb2c278c53613212d6643cd2212b96885daba8710519d2c4d358dbf6ec1f7767fd1904f
SSDEEP 6144:i10B0WUkNEbE94ErY/MVqGufINswegE65NhM:i10ByRMVVufINsSx3G
TLSH
T10B14E05C43900EB6D95207B788AAD39C7E410DA9CFD4D3A8901365221EF271E8FFF91A
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4542

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

4KB

Virtual Size

520B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.orpc

Size

4KB

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

212B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

248B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

180KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

jaffacakes118__29dcf7385777d95c3bd5eaaa7a2dcc6b

kernel32

rpcrt4

oleaut32

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__29dcf7385777d95c3bd5eaaa7a2dcc6b

kernel32

rpcrt4

oleaut32

generic