jaffacakes118__15e15d83c2e1e12033da188f7d84985b

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__15e15d83c2e1e12033da188f7d84985b
Size 228KB
Sample260920-3xrr3aeb74
SHA256 e2e17f65e227a9b2d9c1a70d4a7f3474d44cd02025f541ee9ffda990ecc67737
MD5 15e15d83c2e1e12033da188f7d84985b
SHA1 8a3d8edbf45c27e290ce5acc274f5c2375cd59aa
SHA512 fdf2565b9021f5b2c53ba4c1f999bec848be2cc7553c0f3cd93d1904265971ba04bf9d2cf72498968f4c1be4166e185f9ebb74f637941ebff3d1923d1f40008d
SSDEEP 3072:ATzqU4t6OwPNputginjVoFQIcBB9Fle6bu6NonMR9EQEhW3dXFHP:VG6t7hgmocSo7v
TLSH
T1E0349F01BA91C0BBCB4F0179496ADB4D367AA5522FE0DBC7FF589E4E19312C07C3529A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__15e15d83c2e1e12033da188f7d84985b

File Explorer

jaffacakes118__15e15d83c2e1e12033da188f7d84985b

.dll 228KB

jaffacakes118__15e15d83c2e1e12033da188f7d84985b

IMPHASH 7c6b74a432a759d5e95de57525e29ebe
SHA256 e2e17f65e227a9b2d9c1a70d4a7f3474d44cd02025f541ee9ffda990ecc67737
MD5 15e15d83c2e1e12033da188f7d84985b
SHA1 8a3d8edbf45c27e290ce5acc274f5c2375cd59aa
SHA512 fdf2565b9021f5b2c53ba4c1f999bec848be2cc7553c0f3cd93d1904265971ba04bf9d2cf72498968f4c1be4166e185f9ebb74f637941ebff3d1923d1f40008d
SSDEEP 3072:ATzqU4t6OwPNputginjVoFQIcBB9Fle6bu6NonMR9EQEhW3dXFHP:VG6t7hgmocSo7v
TLSH
T1E0349F01BA91C0BBCB4F0179496ADB4D367AA5522FE0DBC7FF589E4E19312C07C3529A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

72235

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\project2\5p\update\new_20110421\release\oleg63.pdb

wininet

InternetReadFile InternetOpenA InternetConnectA HttpOpenRequestA InternetCloseHandle DeleteUrlCacheEntry InternetQueryDataAvailable HttpSendRequestA

urlmon

URLDownloadToFileA

kernel32

SetStdHandle SizeofResource FindResourceA FindResourceExA Sleep GetLastError GetProcAddress CompareStringA InterlockedExchange LoadLibraryA WriteConsoleA CompareStringW GetVersionExA MultiByteToWideChar WideCharToMultiByte lstrlenA LoadResource LockResource LoadLibraryW GetStringTypeW GetStringTypeA GetConsoleMode GetConsoleCP SetFilePointer GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA CreateFileA CloseHandle FlushFileBuffers FreeLibrary HeapSize LCMapStringW LCMapStringA GetSystemTimeAsFileTime InterlockedIncrement InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException HeapDestroy HeapAlloc HeapFree HeapReAlloc GetCurrentProcessId GetProcessHeap GetACP GetLocaleInfoA GetThreadLocale TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetTimeZoneInformation GetLocalTime VirtualAlloc GetModuleHandleA GetCurrentThreadId GetCommandLineA RtlUnwind HeapCreate VirtualFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCPInfo ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetOEMCP IsValidCodePage SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount

user32

UnregisterClassA

advapi32

RegQueryValueExA RegCreateKeyExA RegCloseKey SetServiceStatus RegisterServiceCtrlHandlerExA StartServiceCtrlDispatcherA RegSetValueExA

shell32

ShellExecuteA SHGetSpecialFolderPathA

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__15e15d83c2e1e12033da188f7d84985b

wininet

urlmon

kernel32

user32

advapi32

shell32

generic