jaffacakes118__15b8ae5aaba9675b49cbe189d7b98c1b

General

Target
jaffacakes118__15b8ae5aaba9675b49cbe189d7b98c1b
Size 112KB
Sample260920-3vckcsfr2v
SHA256 f02aa1bb36be1ccb59c3b99f478c97c599cb4b47b6db8afa99e49008773a336f
MD5 15b8ae5aaba9675b49cbe189d7b98c1b
SHA1 b0f43491318eb92f39c1fbad0e7afe0404588e48
SHA512 1623f0caf1a8cb4adbc1efb5ed06a6f2411e300937230514c2eb9633e989b87c14bfa02bc38253cbe0721fbe1b2a9f82e6b5a796da171ef7f807a80feaf1522d
SSDEEP 3072:fPb1IVLs05WNzmn+OpVE7eCKXBGfK/t8uLxXLqCNA0D3mx:ZI20okf0rfKNlfjD3G
TLSH
T1F6B3AF4376A4807BC25A213D3B12A736E57B6EB51CF5E9C73EE09E5B3C34882C625247
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__15b8ae5aaba9675b49cbe189d7b98c1b

File Explorer

jaffacakes118__15b8ae5aaba9675b49cbe189d7b98c1b

.dll 112KB

jaffacakes118__15b8ae5aaba9675b49cbe189d7b98c1b

IMPHASH 06b269f5c00cabf4986f73faefb8d4cb
SHA256 f02aa1bb36be1ccb59c3b99f478c97c599cb4b47b6db8afa99e49008773a336f
MD5 15b8ae5aaba9675b49cbe189d7b98c1b
SHA1 b0f43491318eb92f39c1fbad0e7afe0404588e48
SHA512 1623f0caf1a8cb4adbc1efb5ed06a6f2411e300937230514c2eb9633e989b87c14bfa02bc38253cbe0721fbe1b2a9f82e6b5a796da171ef7f807a80feaf1522d
SSDEEP 3072:fPb1IVLs05WNzmn+OpVE7eCKXBGfK/t8uLxXLqCNA0D3mx:ZI20okf0rfKNlfjD3G
TLSH
T1F6B3AF4376A4807BC25A213D3B12A736E57B6EB51CF5E9C73EE09E5B3C34882C625247
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

103937

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess InterlockedCompareExchange Sleep InterlockedExchange GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter RaiseException GlobalFree ReleaseMutex WaitForSingleObject FreeLibrary GetModuleHandleW WideCharToMultiByte lstrlenA GetVersionExW InterlockedDecrement CreateEventW ChangeTimerQueueTimer SetCurrentDirectoryW GetWindowsDirectoryW CreateDirectoryW GetComputerNameW GetCurrentDirectoryW MoveFileExW UnregisterWait LoadLibraryW GetSystemInfo DisableThreadLibraryCalls GetProcAddress OpenFileMappingW MapViewOfFileEx CreateFileMappingW VirtualAlloc UnmapViewOfFile GetModuleFileNameA GetProfileStringA CreateFileA InterlockedIncrement VirtualProtect IsDebuggerPresent GetCommandLineA

user32

CheckDlgButton IsDlgButtonChecked ShowWindow MessageBoxW SendMessageW GetParent PostMessageW SetWindowLongW BringWindowToTop SetForegroundWindow GetDlgItem GetWindowLongW SetCursor LoadCursorW SetWindowTextW

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey

msvcrt

_initterm _adjust_fdiv _strcmpi memcpy tolower strchr _strnicmp strrchr __dllonexit _lock _onexit _stricmp isspace memset wcschr malloc _except_handler3 _wcsicmp _amsg_exit _XcptFilter free _callnewh

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__15b8ae5aaba9675b49cbe189d7b98c1b

kernel32

user32

advapi32

msvcrt

generic