jaffacakes118__2b715bc5e960f2fc3d45cbe707d3b323

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__2b715bc5e960f2fc3d45cbe707d3b323
Size 555KB
Sample260920-xmlkeays6n
SHA256 f34bec4f5f76aed1418d0e65f591d45904fc1f5c2f9cc281f34322b190885714
MD5 2b715bc5e960f2fc3d45cbe707d3b323
SHA1 710aec59cfbc7cb2ea8f87088638db5096d092ea
SHA512 209cea9a1bfc80ee8cb673e51f9b5ac4927aba0472eaa163955f1694daa5f58bebf225770b4a4e86cfb75afc9a321154a2c61723b2545ffd618ea6082e293263
SSDEEP 12288:/r3ZBIRVF6Zv0mxBK0ANQ5cNOXmETaRZt3dLqqI1j:LZB2VUZv0mXKnNQP2JFsqIh
TLSH
T144C41205BBC240F3E5819730682CA322E57AFF15BF75F29D83467E696C34A12B445BA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2b715bc5e960f2fc3d45cbe707d3b323

File Explorer

jaffacakes118__2b715bc5e960f2fc3d45cbe707d3b323

.exe 555KB

jaffacakes118__2b715bc5e960f2fc3d45cbe707d3b323

IMPHASH 87b324a67e18fb2e1d12308b06fa8d4f
SHA256 f34bec4f5f76aed1418d0e65f591d45904fc1f5c2f9cc281f34322b190885714
MD5 2b715bc5e960f2fc3d45cbe707d3b323
SHA1 710aec59cfbc7cb2ea8f87088638db5096d092ea
SHA512 209cea9a1bfc80ee8cb673e51f9b5ac4927aba0472eaa163955f1694daa5f58bebf225770b4a4e86cfb75afc9a321154a2c61723b2545ffd618ea6082e293263
SSDEEP 12288:/r3ZBIRVF6Zv0mxBK0ANQ5cNOXmETaRZt3dLqqI1j:LZB2VUZv0mXKnNQP2JFsqIh
TLSH
T144C41205BBC240F3E5819730682CA322E57AFF15BF75F29D83467E696C34A12B445BA3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegCloseKey RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA SetFileSecurityA SetFileSecurityW

kernel32

CloseHandle CompareStringA CreateDirectoryA CreateDirectoryW CreateFileA CreateFileW DeleteFileA DeleteFileW DosDateTimeToFileTime ExitProcess ExpandEnvironmentStringsA FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindResourceA FreeLibrary GetCPInfo GetCommandLineA GetCurrentDirectoryA GetCurrentProcess GetDateFormatA GetFileAttributesA GetFileAttributesW GetFileType GetFullPathNameA GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetNumberFormatA GetProcAddress GetProcessHeap GetStdHandle GetTempPathA GetTickCount GetTimeFormatA GetVersionExA GlobalAlloc HeapAlloc HeapFree HeapReAlloc IsDBCSLeadByte LoadLibraryA LocalFileTimeToFileTime MoveFileA MoveFileExA MultiByteToWideChar ReadFile SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetFileAttributesA SetFileAttributesW SetFilePointer SetFileTime SetLastError Sleep SystemTimeToFileTime WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpiA lstrlenA

comctl32

ord17

comdlg32

CommDlgExtendedError GetOpenFileNameA

gdi32

DeleteObject

shell32

SHBrowseForFolderA SHChangeNotify SHFileOperationA SHGetFileInfoA SHGetMalloc SHGetSpecialFolderLocation ShellExecuteExA SHGetPathFromIDListA

user32

CharToOemA CharToOemBuffA CharUpperA CopyRect CreateWindowExA DefWindowProcA DestroyIcon DestroyWindow DialogBoxParamA DispatchMessageA EnableWindow EndDialog FindWindowExA GetClassNameA GetClientRect GetDlgItem GetDlgItemTextA GetMessageA GetParent GetSysColor GetSystemMetrics GetWindow GetWindowLongA GetWindowRect GetWindowTextA IsWindow IsWindowVisible LoadBitmapA LoadCursorA LoadIconA LoadStringA MapWindowPoints MessageBoxA OemToCharA OemToCharBuffA PeekMessageA PostMessageA RegisterClassExA SendDlgItemMessageA SendMessageA SetDlgItemTextA SetFocus SetMenu SetWindowLongA SetWindowPos SetWindowTextA ShowWindow TranslateMessage UpdateWindow WaitForInputIdle wsprintfA wvsprintfA

ole32

CLSIDFromString CoCreateInstance CreateStreamOnHGlobal OleInitialize OleUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2b715bc5e960f2fc3d45cbe707d3b323

advapi32

kernel32

comctl32

comdlg32

gdi32

shell32

user32

ole32

generic