jaffacakes118__28ff97577db8798ecc16dba4d0050a44

General

Target
jaffacakes118__28ff97577db8798ecc16dba4d0050a44
Size 143KB
Sample260920-2kascade96
SHA256 7bf9304387e90f77b19807b1d57ab41bdbf794dc75613c971d0947fb771a606a
MD5 28ff97577db8798ecc16dba4d0050a44
SHA1 35af43ea8b8e2c9a5ebff8acb5429bb894a58763
SHA512 484ed3a0f132e7ff88930fd60349886b244a31f1a29137ab58d468238baa609f62e9a1894a9811bb3a6faf1738ac0df77bfe2b50000db39d10d6a5c855b64ab2
SSDEEP 1536:CbMltOCdIi8s5LeloYHga0kyqd5SoZLPOUNVjJ6tVe1lYXMltj0o2MldGYJKxG:CQ354TWqd5Sxud1GUjH2MTDKxG
TLSH
T11BE3C01E74C0C833C19645B48869F6457AAEE820677686E337E72ABFEF215F16B3D101
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__28ff97577db8798ecc16dba4d0050a44

File Explorer

jaffacakes118__28ff97577db8798ecc16dba4d0050a44

.exe 143KB

jaffacakes118__28ff97577db8798ecc16dba4d0050a44

IMPHASH 0641d120c17a37cc740447184fd600b4
SHA256 7bf9304387e90f77b19807b1d57ab41bdbf794dc75613c971d0947fb771a606a
MD5 28ff97577db8798ecc16dba4d0050a44
SHA1 35af43ea8b8e2c9a5ebff8acb5429bb894a58763
SHA512 484ed3a0f132e7ff88930fd60349886b244a31f1a29137ab58d468238baa609f62e9a1894a9811bb3a6faf1738ac0df77bfe2b50000db39d10d6a5c855b64ab2
SSDEEP 1536:CbMltOCdIi8s5LeloYHga0kyqd5SoZLPOUNVjJ6tVe1lYXMltj0o2MldGYJKxG:CQ354TWqd5Sxud1GUjH2MTDKxG
TLSH
T11BE3C01E74C0C833C19645B48869F6457AAEE820677686E337E72ABFEF215F16B3D101
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14159

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleFileNameExA

kernel32

FreeEnvironmentStringsW ExitProcess GetProcAddress GetModuleHandleA GetCurrentProcess GetLastError FindResourceExA LockResource LoadResource FindResourceA WaitForSingleObject CreateThread SetLastError LoadLibraryA IsBadReadPtr VirtualProtect VirtualAlloc HeapAlloc GetCommandLineA GetStartupInfoA HeapFree RaiseException CloseHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection MultiByteToWideChar ReadFile DeleteCriticalSection VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType SetFilePointer RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount CreateFileA GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoA SetEndOfFile GetProcessHeap LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__28ff97577db8798ecc16dba4d0050a44

psapi

kernel32

generic