jaffacakes118__288b86752a3efc2caa8f6330d3ab87bc

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__288b86752a3efc2caa8f6330d3ab87bc
Size 208KB
Sample260920-2bdsmsde28
SHA256 919fe23b2902b844fee7c8be56d91fe686aa792c4c01e0739711951dfd5b1826
MD5 288b86752a3efc2caa8f6330d3ab87bc
SHA1 624a7c102100c36f7ba195ce14a966d41d6133fa
SHA512 da1a30dfce5516be71901dca641bddac140df0ced415c6490dc19b046a5290db3f80f3017866c61c7b320cfe7990f9f9ccd1009832860a12a2992eecb569d417
SSDEEP 3072:tto2HyJt6oobhLgaMCLgfl8wofyNqPcJC6XVZVGv9fKZ+3jnHo3hQ1bWpbT6thUM:tPHy/6TyaMCLgt8ty0Opll8iuGE
TLSH
T115248D113EC98C32C7B3C131C61A9BE9E65495320A269C27BB5C32597F7C759843EBE8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__288b86752a3efc2caa8f6330d3ab87bc

File Explorer

jaffacakes118__288b86752a3efc2caa8f6330d3ab87bc

.exe 208KB

jaffacakes118__288b86752a3efc2caa8f6330d3ab87bc

IMPHASH db30eb4355fb69eb637dd536c90c9702
SHA256 919fe23b2902b844fee7c8be56d91fe686aa792c4c01e0739711951dfd5b1826
MD5 288b86752a3efc2caa8f6330d3ab87bc
SHA1 624a7c102100c36f7ba195ce14a966d41d6133fa
SHA512 da1a30dfce5516be71901dca641bddac140df0ced415c6490dc19b046a5290db3f80f3017866c61c7b320cfe7990f9f9ccd1009832860a12a2992eecb569d417
SSDEEP 3072:tto2HyJt6oobhLgaMCLgfl8wofyNqPcJC6XVZVGv9fKZ+3jnHo3hQ1bWpbT6thUM:tPHy/6TyaMCLgt8ty0Opll8iuGE
TLSH
T115248D113EC98C32C7B3C131C61A9BE9E65495320A269C27BB5C32597F7C759843EBE8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

67485

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

wsock32

gethostbyname

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegDeleteKeyA RegDeleteValueA

shell32

Shell_NotifyIconA SHGetSpecialFolderPathA SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetMalloc ShellExecuteA SHFileOperationA

kernel32

lstrlenA GetModuleHandleA InterlockedDecrement GetLastError GetProcAddress GetDiskFreeSpaceA CloseHandle CreateThread GetCommandLineA GetModuleFileNameA InterlockedIncrement DebugBreak OutputDebugStringA GetTempPathA CreateDirectoryA lstrcpyA GetFileSize CreateFileA DeleteFileA FlushFileBuffers GetVersionExA WriteFile SetFilePointer Sleep lstrcatA GetShortPathNameA CopyFileA GetVersion GetFullPathNameA CreateMutexA SetLastError LoadLibraryW GetModuleFileNameW GetModuleHandleW LoadLibraryA GetCurrentThreadId InitializeCriticalSection HeapDestroy DeleteCriticalSection LeaveCriticalSection EnterCriticalSection FreeResource GlobalFree GlobalHandle LockResource LoadResource FindResourceA GlobalAlloc lstrlenW MultiByteToWideChar GlobalUnlock GlobalLock MulDiv lstrcmpA FlushInstructionCache GetCurrentProcess WideCharToMultiByte CompareStringA lstrcmpiA FreeLibrary GetTickCount SetHandleCount ReadFile GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter TerminateProcess IsBadWritePtr VirtualAlloc VirtualFree HeapCreate GetEnvironmentVariableA TlsGetValue TlsAlloc TlsSetValue GetEnvironmentStringsW ExitProcess GetStartupInfoA HeapAlloc HeapReAlloc HeapFree RtlUnwind GetStringTypeA IsBadCodePtr SetEndOfFile GetStringTypeW GetCPInfo GetStdHandle GetFileType SetUnhandledExceptionFilter IsBadReadPtr GetOEMCP SetStdHandle LCMapStringW LCMapStringA GetACP

user32

GetDlgItem CharLowerA wvsprintfA PostMessageA MoveWindow CreateWindowExA wsprintfA InvalidateRgn SetCapture ReleaseCapture CreateAcceleratorTableA GetDesktopWindow GetClassNameA IsWindow BeginPaint FillRect EndPaint CallWindowProcA GetDC ReleaseDC GetFocus IsChild SetFocus GetSysColor RedrawWindow CharNextA GetWindowTextLengthA GetWindowTextA SetWindowLongA DefWindowProcA GetClassInfoExA RegisterClassExA RegisterWindowMessageA LoadCursorA CreateDialogIndirectParamA PostQuitMessage GetParent GetWindow GetWindowRect SystemParametersInfoA GetClientRect MapWindowPoints SetWindowPos LoadIconA SetWindowTextA ShowWindow DestroyWindow GetMessageA IsDialogMessageA DispatchMessageA SendMessageA LoadStringA GetWindowLongA InvalidateRect

gdi32

GetDeviceCaps DeleteObject GetStockObject GetObjectA CreateSolidBrush DeleteDC CreateCompatibleBitmap CreateCompatibleDC SelectObject BitBlt

wininet

InternetOpenA HttpQueryInfoA HttpSendRequestA HttpOpenRequestA InternetConnectA InternetCloseHandle InternetReadFile InternetOpenUrlA InternetGetConnectedState

ole32

CLSIDFromString OleInitialize OleUninitialize CLSIDFromProgID CreateStreamOnHGlobal CoCreateInstance CoTaskMemFree StringFromCLSID CoTaskMemAlloc OleLockRunning CoInitialize CoUninitialize

oleaut32

SysFreeString SysAllocString VariantClear LoadRegTypeLi OleCreateFontIndirect SysStringLen SysAllocStringLen

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__288b86752a3efc2caa8f6330d3ab87bc

wsock32

advapi32

shell32

kernel32

user32

gdi32

wininet

ole32

oleaut32

generic