jaffacakes118__2a2388d065dabca416864cb247add55a

General

Target
jaffacakes118__2a2388d065dabca416864cb247add55a
Size 310KB
Sample260920-288paadh36
SHA256 e48d94058bb19c27e0fd80884f5e2389d047d057aba5f28de1e94c2953248b1d
MD5 2a2388d065dabca416864cb247add55a
SHA1 b07eedbfc011af2c28a4dd32a03553b30d826298
SHA512 0277533710093213375122cfa6f4fa2ed0b786017bfe2a6dcadf41fbad69bb5ab3f91691fe5e80ebda2d2231b44269a8e3e0cc953648bd4e5666b9e9bde3bc69
SSDEEP 6144:fNPtWe0M0rZynhsvRpvTVlOPtR19aIKgHK29K:fNsXldynh2RpjOFRbaIKgHKZ
TLSH
T13B646D10EF40C034F9E301BE9E7A671CDE2CBE711B29A0EB678495955626FD8BD30287
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2a2388d065dabca416864cb247add55a

File Explorer

jaffacakes118__2a2388d065dabca416864cb247add55a

.dll 310KB

jaffacakes118__2a2388d065dabca416864cb247add55a

IMPHASH d5882fc11d6480a012ba1fc85ef60e2c
SHA256 e48d94058bb19c27e0fd80884f5e2389d047d057aba5f28de1e94c2953248b1d
MD5 2a2388d065dabca416864cb247add55a
SHA1 b07eedbfc011af2c28a4dd32a03553b30d826298
SHA512 0277533710093213375122cfa6f4fa2ed0b786017bfe2a6dcadf41fbad69bb5ab3f91691fe5e80ebda2d2231b44269a8e3e0cc953648bd4e5666b9e9bde3bc69
SSDEEP 6144:fNPtWe0M0rZynhsvRpvTVlOPtR19aIKgHK29K:fNsXldynh2RpjOFRbaIKgHKZ
TLSH
T13B646D10EF40C034F9E301BE9E7A671CDE2CBE711B29A0EB678495955626FD8BD30287
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

56256

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CompareStringW LoadLibraryA VirtualAlloc EnumResourceTypesW FlushFileBuffers RtlMoveMemory GetDateFormatA GetEnvironmentVariableA DeleteFiber GetProcAddress GetCommandLineA GetStartupInfoA SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleW Sleep InterlockedIncrement InterlockedDecrement ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate HeapFree VirtualFree WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetModuleFileNameW HeapAlloc HeapSize HeapReAlloc RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW SetFilePointer GetConsoleCP GetConsoleMode RaiseException SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle

user32

TrackPopupMenuEx IsCharLowerA GetMenuState

gdi32

CreateFontW OffsetClipRgn EndPath

advapi32

GetUserNameW

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2a2388d065dabca416864cb247add55a

kernel32

user32

gdi32

advapi32

generic