jaffacakes118__15b166b177d9ea4a894aa50d5031b9db

General

Target
jaffacakes118__15b166b177d9ea4a894aa50d5031b9db
Size 566KB
Sample260920-3tv1basv2n
SHA256 9ef7b7413e2329d546e6d2488a2816569b535a3b2adfe8472ac2605b57bdb06b
MD5 15b166b177d9ea4a894aa50d5031b9db
SHA1 23803ae785e07229cc57d7428cc63026bf352a10
SHA512 96e714ac04036ab1db7c7a3afb38d18c45ac7037b06e8c7d7ec929fc91d93f74003f586cb977ce2a7be190c19df6f917d00f16c2c4b6d9b63940ac1eba1a5109
SSDEEP 12288:KAcBi8xBEoRPHEsuaOZ3brKXV3YcM82XmApcz9fcgqdHt:KAcBLzuPJbrFcCdcxf+Ht
TLSH
T1EAC4124BB03E639BEBC881391F3E7476B425F68D4A5C5033B9889D29856D1423CCEDE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__15b166b177d9ea4a894aa50d5031b9db

File Explorer

jaffacakes118__15b166b177d9ea4a894aa50d5031b9db

.exe 566KB

jaffacakes118__15b166b177d9ea4a894aa50d5031b9db

IMPHASH a88f2fe31ccfd3b1d15c68747bdc7f79
SHA256 9ef7b7413e2329d546e6d2488a2816569b535a3b2adfe8472ac2605b57bdb06b
MD5 15b166b177d9ea4a894aa50d5031b9db
SHA1 23803ae785e07229cc57d7428cc63026bf352a10
SHA512 96e714ac04036ab1db7c7a3afb38d18c45ac7037b06e8c7d7ec929fc91d93f74003f586cb977ce2a7be190c19df6f917d00f16c2c4b6d9b63940ac1eba1a5109
SSDEEP 12288:KAcBi8xBEoRPHEsuaOZ3brKXV3YcM82XmApcz9fcgqdHt:KAcBLzuPJbrFcCdcxf+Ht
TLSH
T1EAC4124BB03E639BEBC881391F3E7476B425F68D4A5C5033B9889D29856D1423CCEDE9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5520

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError GetVersion ExitProcess HeapAlloc GetProcessHeap VirtualAlloc Sleep VirtualFree UnmapViewOfFile IsValidCodePage CreateProcessA InterlockedExchange GetACP CloseHandle ReadFile SetFilePointer MapViewOfFile InterlockedCompareExchange HeapSize WideCharToMultiByte GetCommandLineW SizeofResource lstrlenW GetEnvironmentStringsW LCMapStringA GetConsoleCP lstrlenA GetSystemInfo LCMapStringW LeaveCriticalSection CreateFileA TlsSetValue GetFileType CreateEventA CreateFileW GlobalLock DuplicateHandle FindFirstFileW CreateFileMappingA CompareStringA FindFirstFileA CompareStringW GetProcAddress DeleteFileW DeleteFileA GetFileSize GetStartupInfoA FreeLibrary GetCurrentThreadId GetVersionExA TlsAlloc QueryPerformanceCounter GetOEMCP lstrcmpiA SetHandleCount EnterCriticalSection HeapFree WriteConsoleW GlobalAlloc WriteConsoleA TerminateProcess MulDiv SetUnhandledExceptionFilter CreateThread MultiByteToWideChar TlsGetValue UnhandledExceptionFilter lstrcmpiW GetModuleFileNameA FlushFileBuffers IsDebuggerPresent GetModuleFileNameW SetLastError FormatMessageA InterlockedDecrement FindClose InitializeCriticalSection LocalFree GetExitCodeProcess GetStringTypeW HeapReAlloc WriteFile GetStringTypeA LoadLibraryW GetCPInfo GetTempPathA FreeEnvironmentStringsW SetErrorMode LocalAlloc GetLocaleInfoA GetConsoleMode GetCurrentProcess DeleteCriticalSection FreeEnvironmentStringsA HeapDestroy GetDriveTypeA WaitForSingleObject GetCurrentThread GetCommandLineA GetModuleHandleA GetTickCount LoadLibraryA GetCurrentProcessId

user32

LoadIconA CheckMenuItem SetWindowLongA GetWindowRect SetFocus DispatchMessageA RegisterClassA EnableMenuItem GetWindow EnableWindow ShowWindow UpdateWindow SendMessageA GetDC SystemParametersInfoA IsWindowVisible InvalidateRect GetClientRect SetCursor MoveWindow

gdi32

GetStockObject DeleteDC GetDeviceCaps DeleteObject CreateCompatibleDC

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__15b166b177d9ea4a894aa50d5031b9db

kernel32

user32

gdi32

generic