jaffacakes118__2a79aa316d8d2039ce10c1342bcf7c0e

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__2a79aa316d8d2039ce10c1342bcf7c0e
Size 614KB
Sample260920-3ggbdsfq21
SHA256 d745ad5ed2d8660683dd2bd1dd387038f48cb7327814855ddf536c7c079d7b2e
MD5 2a79aa316d8d2039ce10c1342bcf7c0e
SHA1 13bc7aebaf5267d69092653588c41d8617bde017
SHA512 f0dbad739a81d4b4aa5df21f4138b214ea99d60eeafae7bb72409c9412d84b655ebb9c8fc887f60afa5e865a234da2d902c08262155a8fef2186dab4f2e82ed2
SSDEEP 12288:W3TL2EvTsm4FrSwhfMH4c3U07F4JN1pYkWra0gORqCJBV1Ls2LMpB8aUH0W:un2YTHWuyfMYc3U0wYk9OMCJBV1Ls2wk
TLSH
T135D4E0635442C6B1FD9941BF2925C2E4DB39EF03135874E3A38A3B61BA179D36B38748
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2a79aa316d8d2039ce10c1342bcf7c0e

File Explorer

jaffacakes118__2a79aa316d8d2039ce10c1342bcf7c0e

.exe 614KB

jaffacakes118__2a79aa316d8d2039ce10c1342bcf7c0e

IMPHASH b51650f67049c5693260c2b70413ed5e
SHA256 d745ad5ed2d8660683dd2bd1dd387038f48cb7327814855ddf536c7c079d7b2e
MD5 2a79aa316d8d2039ce10c1342bcf7c0e
SHA1 13bc7aebaf5267d69092653588c41d8617bde017
SHA512 f0dbad739a81d4b4aa5df21f4138b214ea99d60eeafae7bb72409c9412d84b655ebb9c8fc887f60afa5e865a234da2d902c08262155a8fef2186dab4f2e82ed2
SSDEEP 12288:W3TL2EvTsm4FrSwhfMH4c3U07F4JN1pYkWra0gORqCJBV1Ls2LMpB8aUH0W:un2YTHWuyfMYc3U0wYk9OMCJBV1Ls2wk
TLSH
T135D4E0635442C6B1FD9941BF2925C2E4DB39EF03135874E3A38A3B61BA179D36B38748
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

memset sprintf _strnicmp strncmp strncpy _strdup free strlen strcpy strcat memcpy fread _setjmp3 fclose fopen fseek strcmp _snprintf abort _CIpow _iob fprintf longjmp malloc strtod

kernel32

GetModuleHandleA HeapCreate IsDebuggerPresent OpenProcess GetTickCount ReadProcessMemory WriteProcessMemory VirtualAllocEx CreateRemoteThread WaitForSingleObject GetExitCodeThread VirtualFreeEx CloseHandle VirtualProtectEx HeapDestroy ExitProcess GetModuleFileNameA HeapFree HeapAlloc GetCurrentThreadId GetCurrentProcessId InitializeCriticalSection GetCurrentProcess DuplicateHandle CreatePipe GetStdHandle CreateProcessA EnterCriticalSection LeaveCriticalSection MultiByteToWideChar LoadLibraryA GetProcAddress FreeLibrary Sleep GlobalAlloc GlobalFree GetTempPathA DeleteFileA CopyFileA WriteFile CreateFileA GetFileSize ReadFile SetFilePointer HeapReAlloc GlobalLock GlobalUnlock

comctl32

InitCommonControls CreateStatusWindowA InitCommonControlsEx

user32

GetForegroundWindow GetWindowThreadProcessId GetKeyboardState GetAsyncKeyState GetWindowRect GetCursorPos PtInRect SetClassLongA RedrawWindow GetPropA GetParent GetClientRect SendMessageA InvalidateRect CallWindowProcA SetPropA SetWindowLongA DestroyWindow MessageBoxA IsWindowVisible IsWindowEnabled EnableWindow EnumWindows DestroyIcon CreateIconFromResourceEx CreateIconFromResource GetIconInfo ShowWindow GetWindowLongA ScreenToClient SetWindowPos UpdateWindow ReleaseCapture BeginPaint DrawStateA EndPaint SetCapture GetSystemMetrics CreateWindowExA RemovePropA DefWindowProcA PostMessageA GetWindow SetActiveWindow UnregisterClassA DestroyAcceleratorTable LoadIconA LoadCursorA RegisterClassA AdjustWindowRect GetActiveWindow CreateAcceleratorTableA SetCursorPos LoadImageA SetCursor MapWindowPoints MoveWindow SystemParametersInfoA GetKeyState PeekMessageA MsgWaitForMultipleObjects GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA FillRect EnumChildWindows DefFrameProcA SetFocus GetFocus IsChild GetClassNameA OpenClipboard EmptyClipboard CloseClipboard SetClipboardData

gdi32

CreatePatternBrush GetObjectType DeleteObject CreateCompatibleDC SetDIBits DeleteDC GetObjectA CreateDCA CreateCompatibleBitmap CreateDIBSection GetStockObject

advapi32

GetCurrentHwProfileA

ole32

CoInitialize CoUninitialize CoCreateInstance RevokeDragDrop

shell32

ShellExecuteExA

urlmon

URLDownloadToFileA

wininet

InternetGetConnectedState

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2a79aa316d8d2039ce10c1342bcf7c0e

msvcrt

kernel32

comctl32

user32

gdi32

advapi32

ole32

shell32

urlmon

wininet

generic