jaffacakes118__2bc87fb36f2188618c9dbb0b43820fd1

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__2bc87fb36f2188618c9dbb0b43820fd1
Size 51KB
Sample260920-xt4pkazzct
SHA256 f303b2106524c447cb335939eb6aea952d0e105a3f4f74694085bd5c77955f95
MD5 2bc87fb36f2188618c9dbb0b43820fd1
SHA1 a2abc206deed65c2ccb201892cbb91ce18429373
SHA512 d5e2dba00193ae64c7047e55c53aa035e6878e0b9556758d634c1434f5f0e0963afa41930576a6d7d13cc34e81728832cdac5f4eca3b77e9a78b01a26fe54de0
SSDEEP 1536:WMJbDMDSA7FxffJaLaSLGwdqJ4ZrQUfbHzG3EA181Yc:hJbDMOmFCLGwdqJ4pQ2bOET
TLSH
T1AF33AE026BA9613EF0F60870517A58225ABBFD710F1AD79FD1405ADF6834A639D3433B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__2bc87fb36f2188618c9dbb0b43820fd1

File Explorer

jaffacakes118__2bc87fb36f2188618c9dbb0b43820fd1

.exe 51KB

jaffacakes118__2bc87fb36f2188618c9dbb0b43820fd1

IMPHASH f752af36170e273f3502f811b9235c7f
SHA256 f303b2106524c447cb335939eb6aea952d0e105a3f4f74694085bd5c77955f95
MD5 2bc87fb36f2188618c9dbb0b43820fd1
SHA1 a2abc206deed65c2ccb201892cbb91ce18429373
SHA512 d5e2dba00193ae64c7047e55c53aa035e6878e0b9556758d634c1434f5f0e0963afa41930576a6d7d13cc34e81728832cdac5f4eca3b77e9a78b01a26fe54de0
SSDEEP 1536:WMJbDMDSA7FxffJaLaSLGwdqJ4ZrQUfbHzG3EA181Yc:hJbDMOmFCLGwdqJ4pQ2bOET
TLSH
T1AF33AE026BA9613EF0F60870517A58225ABBFD710F1AD79FD1405ADF6834A639D3433B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25129

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

userinit.pdb

user32

CreateWindowExW DestroyWindow RegisterClassExW DefWindowProcW LoadRemoteFonts wsprintfW GetSystemMetrics GetKeyboardLayout SystemParametersInfoW GetDesktopWindow LoadStringW MessageBoxW ExitWindowsEx CharNextW

advapi32

RegOpenKeyExA ReportEventW RegisterEventSourceW DeregisterEventSource OpenProcessToken RegCreateKeyExW RegSetValueExW GetUserNameW RegQueryValueExW RegOpenKeyExW RegQueryInfoKeyW RegCloseKey RegQueryValueExA

crypt32

CryptProtectData

winspool.drv

SpoolerInit

ntdll

RtlLengthSid RtlCopySid _itow RtlFreeUnicodeString DbgPrint wcslen wcscpy wcscat wcscmp RtlInitUnicodeString NtOpenKey NtClose _wcsicmp memmove RtlConvertSidToUnicodeString NtQueryInformationToken

netapi32

DsGetDcNameW NetApiBufferFree

wldap32

ord46 ord88 ord14 ord12 ord145 ord73

msvcrt

__setusermatherr _initterm __getmainargs _acmdln _adjust_fdiv _XcptFilter _exit _c_exit __p__commode __p__fmode __set_app_type _except_handler3 _controlfp _cexit exit

kernel32

CompareFileTime LoadLibraryW GetProcAddress FreeLibrary lstrcpyW CreateProcessW lstrlenW GetVersionExW LocalFree LocalAlloc GetEnvironmentVariableW CloseHandle lstrcatW WaitForSingleObject DelayLoadFailureHook GetStartupInfoA GetModuleHandleA SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime GetCurrentThreadId GetTickCount QueryPerformanceCounter LoadLibraryA InterlockedCompareExchange LocalReAlloc GetSystemTime lstrcmpW GetCurrentThread SetThreadPriority ExpandEnvironmentStringsW SearchPathW GetLastError CreateThread GetFileAttributesExW GetSystemDirectoryW SetCurrentDirectoryW FormatMessageW lstrcmpiW GetCurrentProcess GetUserDefaultLangID GetCurrentProcessId SetEvent OpenEventW Sleep SetEnvironmentVariableW

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__2bc87fb36f2188618c9dbb0b43820fd1

user32

advapi32

crypt32

winspool.drv

ntdll

netapi32

wldap32

msvcrt

kernel32

generic