jaffacakes118__29518c5ec4d83ff97ff1303fa469a80b

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__29518c5ec4d83ff97ff1303fa469a80b
Size 59KB
Sample260920-2rb9radf79
SHA256 52ceca35d140380a55f4ae9498c7fbb3b5d93032880894666e27624ecc741a43
MD5 29518c5ec4d83ff97ff1303fa469a80b
SHA1 24743fed548fcb393560511678b35941d7572c4c
SHA512 f1ce58f9a1917473c3d0322c011d84fa052d8afdc1b7cbb49dc8dc61537a0d06d066facbe26e3e317621622c2e6155d82808992f038728fcdd92221eb36e86e8
SSDEEP 1536:9KyOWUFsyCfVS9tk1GcUlSFbVOW4rkgYYMV5X5P7E:SWUFsyCtSKdirU5S
TLSH
T1FE431813EE4C5287D42E0B3520B91B0DE230D6297F2B179B516CBE3DEE953C32A56389
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__29518c5ec4d83ff97ff1303fa469a80b

File Explorer

jaffacakes118__29518c5ec4d83ff97ff1303fa469a80b

.exe 59KB

jaffacakes118__29518c5ec4d83ff97ff1303fa469a80b

IMPHASH 301cec26af9a64f211ec22a3e7620691
SHA256 52ceca35d140380a55f4ae9498c7fbb3b5d93032880894666e27624ecc741a43
MD5 29518c5ec4d83ff97ff1303fa469a80b
SHA1 24743fed548fcb393560511678b35941d7572c4c
SHA512 f1ce58f9a1917473c3d0322c011d84fa052d8afdc1b7cbb49dc8dc61537a0d06d066facbe26e3e317621622c2e6155d82808992f038728fcdd92221eb36e86e8
SSDEEP 1536:9KyOWUFsyCfVS9tk1GcUlSFbVOW4rkgYYMV5X5P7E:SWUFsyCtSKdirU5S
TLSH
T1FE431813EE4C5287D42E0B3520B91B0DE230D6297F2B179B516CBE3DEE953C32A56389
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4423

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

sqlunirl

__lcreat_@8 _MAKEINTRESOURCE@4 _NDdeIsValidAppTopicList_@4 _LoadIcon@8 _GetToolsFilePath@16 _SetFileAttributes_@8 _GetTabbedTextExtent_@20 _OemToCharBuff_@12 _GetMessage_@16 _CreateFile@28 _ResetDC_@8 _GetSystemDirectory_@8 _GetCharacterPlacement_@24 _GetEnhMetaFile_@4 _GetDlgItemText@16 _strerror_@4 _DragQueryFile_@16 _GetOutlineTextMetrics_@12 _PostThreadMessage_@16 _SHGetPathFromIDList_@8 _GetModuleHandle_@4 _WinHelp@16 _RegEnumKey_@16 _GetProfileSection_@12 _VerQueryValue_@16 __lwrite_@12 _RegReplaceKey_@16 _CreateWaitableTimer_@12 _SendNotifyMessage_@16

msvcrt20

?tie@ios@@QAEPAVostream@@PAV2@@Z _waccess asctime ?_query_new_mode@@YAHXZ ??0ifstream@@QAE@PBDHH@Z _setjmp setlocale _chdir _tcsnicmp _umask fsetpos _mbsnset ?out_waiting@streambuf@@QBEHXZ ?lockptr@ios@@IAEPAU_RTL_CRITICAL_SECTION@@XZ _spawnl ??_8strstream@@7Bostream@@@ _mbscmp _mbsstr ?getline@istream@@QAEAAV1@PADHD@Z ?set_unexpected@@YAP6AXXZP6AXXZ@Z ??5istream@@QAEAAV0@AAJ@Z wcsftime _mbsicmp ??6ostream@@QAEAAV0@I@Z ?seekp@ostream@@QAEAAV1@JW4seek_dir@ios@@@Z __p__amblksiz ??_Distream@@QAEXXZ ?getline@istream@@QAEAAV1@PACHD@Z _clearfp iswalpha ?in_avail@streambuf@@QBEHXZ _ismbbgraph iswupper ?get@istream@@QAEHXZ fgets _mbscspn _wgetdcwd ?openprot@filebuf@@2HB ??0ofstream@@QAE@PBDHH@Z _safe_fdiv _fcloseall __threadhandle _splitpath strtod ??0streambuf@@IAE@XZ longjmp iswprint _ismbclegal ??2@YAPAXI@Z ?delbuf@ios@@QBEHXZ ??6ostream@@QAEAAV0@PBC@Z iswlower _fstat _setsystime

kernel32

DuplicateConsoleHandle SetupComm GetShortPathNameA GetLargestConsoleWindowSize VerSetConditionMask DeviceIoControl GetConsoleAliasesA EnumSystemLocalesW SetProcessAffinityMask LoadLibraryA LocalShrink GetGeoInfoW ReleaseActCtx QueryPerformanceCounter FindAtomA VDMConsoleOperation GetExitCodeProcess SetCalendarInfoW CopyFileExW BaseInitAppcompatCacheSupport SetConsoleWindowInfo SetCommState EnumResourceNamesA InitAtomTable GetVolumeInformationA SetLocalPrimaryComputerNameW GetConsoleCommandHistoryA ReadFileEx VirtualQueryEx GetLongPathNameW AllocConsole ReadConsoleInputA QueueUserWorkItem PeekNamedPipe BuildCommDCBW GetSystemDefaultUILanguage EnumDateFormatsExA FreeLibraryAndExitThread ExpandEnvironmentStringsW FindResourceA SetConsoleCtrlHandler GetStringTypeW RemoveDirectoryA GetHandleContext EndUpdateResourceA SetTimeZoneInformation OpenThread SetProcessWorkingSetSize SetThreadExecutionState SetVolumeMountPointA GetStartupInfoW GlobalAddAtomW CreateSemaphoreW GetCurrentThreadId Toolhelp32ReadProcessMemory MoveFileWithProgressA CreateDirectoryExA GetSystemWindowsDirectoryA SetLocalPrimaryComputerNameA VirtualAlloc ResumeThread GetSystemDefaultLangID DefineDosDeviceW _lclose HeapDestroy GetConsoleMode GetOEMCP UTRegister GetConsoleCommandHistoryW RestoreLastError GetCurrentProcessId SetErrorMode GetThreadSelectorEntry SetWaitableTimer PrivMoveFileIdentityW GetPrivateProfileIntA QueryDepthSList GetDiskFreeSpaceExA RegisterConsoleIME GetTickCount CreateNamedPipeA GetWriteWatch AddAtomW

winmm

midiInGetDevCapsA mciExecute mciGetDeviceIDW mmTaskBlock timeSetEvent mixerGetLineInfoA SendDriverMessage sndPlaySoundA joyGetPos midiInAddBuffer mmioRenameW midiInPrepareHeader waveOutGetDevCapsW mmioGetInfo midiOutCacheDrumPatches mmDrvInstall midiInGetErrorTextA midiOutGetNumDevs joySetThreshold waveInGetErrorTextA waveOutGetErrorTextA waveOutOpen waveInStop midiOutGetErrorTextA waveInGetID mciFreeCommandResource waveInGetDevCapsW

userenv

GetGPOListA LeaveCriticalPolicySection GetProfilesDirectoryW GetProfileType DestroyEnvironmentBlock GetDefaultUserProfileDirectoryW EnterCriticalPolicySection RegisterGPNotification ProcessGroupPolicyCompleted GetAllUsersProfileDirectoryW DeleteProfileW DllGetClassObject WaitForUserPolicyForegroundProcessing DeleteProfileA RsopSetPolicySettingStatus GetAppliedGPOListA RsopResetPolicySettingStatus FreeGPOListA LoadUserProfileW GetUserProfileDirectoryA RsopAccessCheckByType RsopLoggingEnabled CreateEnvironmentBlock UnloadUserProfile

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__29518c5ec4d83ff97ff1303fa469a80b

sqlunirl

msvcrt20

kernel32

winmm

userenv

generic