jaffacakes118__29505c8e20bebff5f6be0aebb01c731e

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__29505c8e20bebff5f6be0aebb01c731e
Size 108KB
Sample260920-2rae6adf78
SHA256 f7cecf0d99e8138e032477ab8780ffcfa6dcf50497e320fa05a6dd55dc9c4f13
MD5 29505c8e20bebff5f6be0aebb01c731e
SHA1 01a2639d203d8a9edc8613a25862b3bebe992d5c
SHA512 6a02193110970d2c26968339dc9de48b8b7e6e95a43a3bf13896bc496c871f8d1082165b6957661425487b61c617d010884fab98e82a9b81ddef7d9cab64e13a
SSDEEP 1536:zoBJvNmH6rNvxi0Qc3dIGAT01mMGlw9ZEnP:zozVZvJm01mBeEnP
TLSH
T15BB360C566B6C323E47E0D3F452516917BFEFFE2E46A552FCA0226396AB01C44A1072F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__29505c8e20bebff5f6be0aebb01c731e

File Explorer

jaffacakes118__29505c8e20bebff5f6be0aebb01c731e

.exe 108KB

jaffacakes118__29505c8e20bebff5f6be0aebb01c731e

IMPHASH b3fe98783c971443e9a7e6cadf916a81
SHA256 f7cecf0d99e8138e032477ab8780ffcfa6dcf50497e320fa05a6dd55dc9c4f13
MD5 29505c8e20bebff5f6be0aebb01c731e
SHA1 01a2639d203d8a9edc8613a25862b3bebe992d5c
SHA512 6a02193110970d2c26968339dc9de48b8b7e6e95a43a3bf13896bc496c871f8d1082165b6957661425487b61c617d010884fab98e82a9b81ddef7d9cab64e13a
SSDEEP 1536:zoBJvNmH6rNvxi0Qc3dIGAT01mMGlw9ZEnP:zozVZvJm01mBeEnP
TLSH
T15BB360C566B6C323E47E0D3F452516917BFEFFE2E46A552FCA0226396AB01C44A1072F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

36269

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

HttpQueryInfoW InternetCrackUrlA InternetCanonicalizeUrlA InternetCloseHandle InternetOpenUrlW InternetOpenW InternetOpenUrlA InternetCanonicalizeUrlW InternetReadFile

ole32

CoInitialize CoCreateInstance

shell32

SHBrowseForFolderA SHGetPathFromIDListA SHGetSpecialFolderLocation

ws2_32

gethostbyname WSAStartup WSACleanup

shlwapi

PathGetCharTypeW

kernel32

LoadLibraryA ReadFile GetFileSize CreateFileMappingA MapViewOfFile RtlMoveMemory RtlZeroMemory VirtualProtect lstrcmpA lstrcpynA lstrlenA LockResource LoadResource CreateProcessA lstrcatA Sleep GetVersionExA ExitProcess CloseHandle GetModuleFileNameA GetDiskFreeSpaceExA CreateDirectoryA CreateFileA SystemTimeToFileTime GetSystemTime CreateMutexA MoveFileA DeleteFileA OutputDebugStringA CopyFileA GetWindowsDirectoryA lstrcpyA MulDiv FlushFileBuffers WriteFile SetFilePointer GetLastError ExitThread TerminateThread CreateThread SizeofResource FreeLibrary RtlUnwind CompareStringA InterlockedExchange GetModuleHandleA GetSystemDirectoryA SetLastError HeapAlloc GetProcessHeap HeapFree GetStartupInfoA GetCommandLineA UnmapViewOfFile GetTickCount

user32

CharLowerA SendMessageA GetDlgItem CreateDialogParamA GetMessageA IsDialogMessageA TranslateMessage DispatchMessageA SetDlgItemTextA GetDlgItemTextA SetFocus GetDC InvalidateRect SetWindowPos ShowWindow SetForegroundWindow IsWindowVisible EnableMenuItem GetSystemMenu

gdi32

CreateFontIndirectA GetDeviceCaps

advapi32

RegSetValueExA RegCloseKey RegDeleteValueA RegQueryValueExA RegCreateKeyExA RegDeleteKeyA OpenSCManagerW RegFlushKey RegOpenKeyExA CloseServiceHandle

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__29505c8e20bebff5f6be0aebb01c731e

wininet

ole32

shell32

ws2_32

shlwapi

kernel32

user32

gdi32

advapi32

generic