jaffacakes118__2a3cdd260fd7e58c61adeb3f04a65b48

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__2a3cdd260fd7e58c61adeb3f04a65b48
Size 401KB
Sample260920-3blc6afp4s
SHA256 c855db6aca7dbb210431969bdb2058f618ae16c5ca49dd7bc08f7036c9a31695
MD5 2a3cdd260fd7e58c61adeb3f04a65b48
SHA1 56749c1a68623c126bba7475962ae6f54fc43e27
SHA512 c0953291bf878e71b86f6f9657d7a8a535e93f3c35080b3949ef26f12056ed2b4c57301f855db8b3e83ba4c8a5008323cb95385149b4566875e5a42fed6608f4
SSDEEP 6144:tG5zDF53J5Vj6zt2TgJ1yuDgIwJpLaVXTdPCN4XaxjYl:tWrpIYz8VXT5CN4K6l
TLSH
T17A94F1537DA15EAEE8924C7EC3A3813312369C360B7B4C4643D877A358BB1536A23D5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2a3cdd260fd7e58c61adeb3f04a65b48

File Explorer

jaffacakes118__2a3cdd260fd7e58c61adeb3f04a65b48

.exe 401KB

jaffacakes118__2a3cdd260fd7e58c61adeb3f04a65b48

IMPHASH d0cbea6ee93463334ce0adec2d078f4b
SHA256 c855db6aca7dbb210431969bdb2058f618ae16c5ca49dd7bc08f7036c9a31695
MD5 2a3cdd260fd7e58c61adeb3f04a65b48
SHA1 56749c1a68623c126bba7475962ae6f54fc43e27
SHA512 c0953291bf878e71b86f6f9657d7a8a535e93f3c35080b3949ef26f12056ed2b4c57301f855db8b3e83ba4c8a5008323cb95385149b4566875e5a42fed6608f4
SSDEEP 6144:tG5zDF53J5Vj6zt2TgJ1yuDgIwJpLaVXTdPCN4XaxjYl:tWrpIYz8VXT5CN4K6l
TLSH
T17A94F1537DA15EAEE8924C7EC3A3813312369C360B7B4C4643D877A358BB1536A23D5B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

156928

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeLibrary VirtualFreeEx FindResourceExA VirtualProtect Sleep GetProcAddress SetLastError CloseHandle GetFileSize CreateMutexA GetSystemTime ReadFile CreateFileA LocalAlloc WriteFile UnlockFile LockFile SetFilePointer CreateEventA SystemTimeToFileTime FindClose FindNextFileA GetStringTypeA LCMapStringW LCMapStringA GlobalAlloc GetOEMCP GetACP GetCPInfo HeapReAlloc HeapAlloc RtlUnwind HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings WideCharToMultiByte FreeEnvironmentStringsW FreeEnvironmentStringsA GetModuleFileNameA UnhandledExceptionFilter GetStringTypeW GetCurrentProcess TerminateProcess HeapFree ExitProcess GetVersion GetCommandLineA GetStartupInfoA GlobalFree CreateSemaphoreA LoadLibraryA GetTempPathA VirtualAlloc GetModuleHandleA VirtualFree GetLastError MultiByteToWideChar CopyFileA

user32

UpdateWindow ShowWindow CreateWindowExA RegisterClassExA LoadCursorA LoadIconA GetIconInfo GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA LoadAcceleratorsA GetDesktopWindow IsWindowVisible GetDC SetWindowRgn CopyImage DrawIcon DestroyIcon CreateIconIndirect EndDialog LoadStringA DialogBoxParamA DestroyWindow DefWindowProcA BeginPaint GetClientRect DrawTextA EndPaint PostQuitMessage IsWindow

gdi32

GetDIBits EnumObjects CreateDCA CreatePen CreateSolidBrush SelectObject Rectangle DeleteObject GetObjectA

ole32

CoInitialize

pdh

PdhCollectQueryData PdhAddCounterA PdhOpenQueryA

Name

.text

Size

160KB

Virtual Size

158KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

99KB

Virtual Size

419KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bosevl

Size

110KB

Virtual Size

110KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vvls

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.msl

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2a3cdd260fd7e58c61adeb3f04a65b48

kernel32

user32

gdi32

ole32

pdh

generic