jaffacakes118__294aa902a343f2a30010afa8252c6310

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__294aa902a343f2a30010afa8252c6310
Size 90KB
Sample260920-2qvppsdf69
SHA256 1aaed3b490108451142a4e72681e3ecdc93ddd56da6cd2b4f42cfc287b4e1819
MD5 294aa902a343f2a30010afa8252c6310
SHA1 23498e0a58b82349574435c58d83fff705f7d481
SHA512 6cac24d2fbfc49d34fcddaf3f45ccb859a17e6db99314dbfa5778ccc248278d41374a0d9f4e35192c98ceb6e17f0ddd5741da6164457ac21d68a48dc7d2cfbce
SSDEEP 1536:OPamL0XWL3ofeHsIo0bdO3p3S0nTne0ipUK4NAlmdodZPtSRnkZaa8H+v4mx+H5:OfLScIgs68Y0nLe0ipUvA4qPtSG0levS
TLSH
T1C893AE11FBE09CB4D197313CA973A26A563FAF344474AE5FE6D02CCB2F269054A1532B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__294aa902a343f2a30010afa8252c6310

File Explorer

jaffacakes118__294aa902a343f2a30010afa8252c6310

.dll 90KB

jaffacakes118__294aa902a343f2a30010afa8252c6310

IMPHASH 62c09ead5a18af06a798ae34be9b7839
SHA256 1aaed3b490108451142a4e72681e3ecdc93ddd56da6cd2b4f42cfc287b4e1819
MD5 294aa902a343f2a30010afa8252c6310
SHA1 23498e0a58b82349574435c58d83fff705f7d481
SHA512 6cac24d2fbfc49d34fcddaf3f45ccb859a17e6db99314dbfa5778ccc248278d41374a0d9f4e35192c98ceb6e17f0ddd5741da6164457ac21d68a48dc7d2cfbce
SSDEEP 1536:OPamL0XWL3ofeHsIo0bdO3p3S0nTne0ipUK4NAlmdodZPtSRnkZaa8H+v4mx+H5:OfLScIgs68Y0nLe0ipUvA4qPtSG0levS
TLSH
T1C893AE11FBE09CB4D197313CA973A26A563FAF344474AE5FE6D02CCB2F269054A1532B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

81757

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetVersionExA lstrlenW LoadLibraryW GetProcAddress FreeLibrary SetLastError GlobalAlloc WideCharToMultiByte GlobalFree MultiByteToWideChar QueryDosDeviceA DefineDosDeviceA SetDefaultCommConfigA Sleep InterlockedExchange lstrlenA GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter InterlockedCompareExchange GetThreadPriority GetVersionExW DisableThreadLibraryCalls lstrcmpW InitializeCriticalSection InterlockedIncrement CreateEventW SetEvent WaitForMultipleObjects SetThreadPriority GetCurrentThread CreateFileMappingA LoadLibraryExA LeaveCriticalSection EnterCriticalSection LocalAlloc DeleteCriticalSection HeapFree LocalFree FormatMessageW GetProcessHeap GetSystemTime SystemTimeToFileTime GetTickCount GetCommandLineA GetSystemTimeAsFileTime VirtualProtect

user32

GetClassNameA CreateDesktopA OpenDesktopA DialogBoxParamA LoadAcceleratorsA LoadStringW PeekMessageW MsgWaitForMultipleObjects EnumDisplaySettingsA PostThreadMessageW GetQueueStatus DispatchMessageW RegisterWindowMessageW

advapi32

RegCloseKey RegOpenKeyExW RegEnumKeyExW RegDeleteKeyW RegCreateKeyExA RegSetValueExA RegEnumKeyExA ObjectOpenAuditAlarmA RegEnumValueA RegQueryValueExA QueryServiceConfigA

gdi32

GetOutlineTextMetricsA GetTextFaceA AddFontResourceA

ole32

CoCreateInstance CoUninitialize CoTaskMemFree StringFromGUID2 CoTaskMemAlloc CoFreeUnusedLibraries

msvcrt

strlen memset memcpy _XcptFilter _amsg_exit wcslen _mbscpy _ltow ??3@YAXPAX@Z __CxxFrameHandler _except_handler3 _adjust_fdiv free malloc _initterm

msvcp60

??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z ??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__294aa902a343f2a30010afa8252c6310

kernel32

user32

advapi32

gdi32

ole32

msvcrt

msvcp60

generic