jaffacakes118__1627d67f2ba15d53c4208c378d657318

General

Target
jaffacakes118__1627d67f2ba15d53c4208c378d657318
Size 160KB
Sample260920-3115xaec42
SHA256 e2aa7160921a2537d55947a239a7de45c1228bf5ad63f98412b430552472fa43
MD5 1627d67f2ba15d53c4208c378d657318
SHA1 4c7c0748279acf74c04ed2501a4a27ffee372ad3
SHA512 0f90685350806f6f57cba2321468004a1370d358a9079fca390ebf72608aa2da0a11b3a7d1c12ae57bd0c38549a8d4a1ee4848926401f70409fec87703a9681d
SSDEEP 3072:HLnYvS/cTw+3lsnsGWd2stqJhnXZGeiiddEt:H2TzGsSEqNa
TLSH
T1A3F3023DF09204A6F0950D370918A6F89A60BD310795DE72F6C6BF5857BDEB2CA31722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__1627d67f2ba15d53c4208c378d657318

File Explorer

jaffacakes118__1627d67f2ba15d53c4208c378d657318

.exe 160KB

jaffacakes118__1627d67f2ba15d53c4208c378d657318

IMPHASH 24babc1e891de79ecf5e3b7adc929c7e
SHA256 e2aa7160921a2537d55947a239a7de45c1228bf5ad63f98412b430552472fa43
MD5 1627d67f2ba15d53c4208c378d657318
SHA1 4c7c0748279acf74c04ed2501a4a27ffee372ad3
SHA512 0f90685350806f6f57cba2321468004a1370d358a9079fca390ebf72608aa2da0a11b3a7d1c12ae57bd0c38549a8d4a1ee4848926401f70409fec87703a9681d
SSDEEP 3072:HLnYvS/cTw+3lsnsGWd2stqJhnXZGeiiddEt:H2TzGsSEqNa
TLSH
T1A3F3023DF09204A6F0950D370918A6F89A60BD310795DE72F6C6BF5857BDEB2CA31722
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14976

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

EndDialog PostQuitMessage EndPaint BeginPaint DefWindowProcA DestroyWindow DialogBoxParamA UpdateWindow ShowWindow CreateWindowExA RegisterClassExA LoadCursorA LoadIconA DispatchMessageA TranslateMessage TranslateAcceleratorA GetMessageA LoadAcceleratorsA LoadStringA MessageBoxA

kernel32

InterlockedIncrement GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA GetLocaleInfoA HeapSize RtlUnwind HeapReAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleHandleA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW GetVolumeInformationW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree GetProcessHeap QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc VirtualAlloc VirtualProtect GetCurrentThread GetThreadTimes CreateThread SetThreadPriority WaitForSingleObject CloseHandle CreateFileA FreeLibrary

advapi32

CryptAcquireContextA CryptCreateHash CryptHashData CryptGetHashParam CryptDestroyHash CryptReleaseContext

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__1627d67f2ba15d53c4208c378d657318

user32

kernel32

advapi32

generic