jaffacakes118__2921f85f5e3ca1fe2610d74f2e6af215

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__2921f85f5e3ca1fe2610d74f2e6af215
Size 364KB
Sample260920-2mjs2afk3x
SHA256 5d44e4e0769079e166b49a8e16210192e4582a2c77f71bb3bd03ccf54f035824
MD5 2921f85f5e3ca1fe2610d74f2e6af215
SHA1 923778994e6f7849ce77ab97301689a3ff9bfa97
SHA512 4ba0d770cc6ed487d68930a7617185dc636e388690b7eea55b5484351544ff234d304d6e9936a21a19f1fce275e1755bdb087fbed2165a43c5be152d276bbb86
SSDEEP 6144:f/T3zd9AVAixibDqwbKhqjX9kjeKHYFqoECLrLnZF7tGUP+BgkTbXD/3/yG0P:f/XM4DShe9EcHPLrLZ5AICgkTP3/yG0
TLSH
T19984AD22B3D2C032E492417156E91BA5DFFABD311536AC878FD43D84AE70581EB3A35B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2921f85f5e3ca1fe2610d74f2e6af215

File Explorer

jaffacakes118__2921f85f5e3ca1fe2610d74f2e6af215

.exe 364KB

jaffacakes118__2921f85f5e3ca1fe2610d74f2e6af215

IMPHASH 2cc17170b5cc1e769f862b5cdb43ee3a
SHA256 5d44e4e0769079e166b49a8e16210192e4582a2c77f71bb3bd03ccf54f035824
MD5 2921f85f5e3ca1fe2610d74f2e6af215
SHA1 923778994e6f7849ce77ab97301689a3ff9bfa97
SHA512 4ba0d770cc6ed487d68930a7617185dc636e388690b7eea55b5484351544ff234d304d6e9936a21a19f1fce275e1755bdb087fbed2165a43c5be152d276bbb86
SSDEEP 6144:f/T3zd9AVAixibDqwbKhqjX9kjeKHYFqoECLrLnZF7tGUP+BgkTbXD/3/yG0P:f/XM4DShe9EcHPLrLZ5AICgkTP3/yG0
TLSH
T19984AD22B3D2C032E492417156E91BA5DFFABD311536AC878FD43D84AE70581EB3A35B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

268389

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceA GetComputerNameA GetVolumeInformationA GetDriveTypeA FreeLibrary GetProcAddress LoadLibraryA GetPrivateProfileStringA CopyFileA MultiByteToWideChar Sleep InitializeCriticalSection InterlockedCompareExchange DeleteCriticalSection GetCurrentThreadId EnterCriticalSection LeaveCriticalSection WideCharToMultiByte AreFileApisANSI CloseHandle ReadFile GetLastError SetFilePointer WriteFile SetEndOfFile FlushFileBuffers GetFileSize LoadResource LockFile LockFileEx GetVersionExA CreateFileA CreateFileW GetTempPathA GetTempPathW GetFileAttributesA DeleteFileA GetFileAttributesW DeleteFileW GetFullPathNameA GetFullPathNameW GetDiskFreeSpaceA GetDiskFreeSpaceW LoadLibraryW LocalFree FormatMessageA FormatMessageW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTime GetSystemTimeAsFileTime CompareStringW CompareStringA LockResource SizeofResource FreeResource GetModuleFileNameA UnlockFile GetShortPathNameA GetOEMCP GetACP GetCPInfo GetStringTypeW GetStringTypeA SetStdHandle RtlUnwind GetEnvironmentStringsW GetEnvironmentStrings HeapAlloc ExitProcess TerminateProcess GetCurrentProcess HeapFree HeapReAlloc GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion HeapDestroy HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType LCMapStringA LCMapStringW GetTimeZoneInformation UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW SetEnvironmentVariableA

user32

FindWindowA

advapi32

RegEnumKeyExA RegOpenKeyExA RegQueryValueExA RegCloseKey GetUserNameA

shell32

ShellExecuteA

wininet

FindCloseUrlCache InternetCloseHandle InternetOpenUrlA InternetOpenA FindNextUrlCacheEntryA FindFirstUrlCacheEntryA

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2921f85f5e3ca1fe2610d74f2e6af215

kernel32

user32

advapi32

shell32

wininet

generic