jaffacakes118__23ef5d158d11c4466b2ac514cf25b9aa

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__23ef5d158d11c4466b2ac514cf25b9aa
Size 137KB
Sample260920-ypfmls1xcx
SHA256 4a98a5dbbbb2666f3d89be700ad42dd45c327b27346da35b93b528ba3ab2c4c8
MD5 23ef5d158d11c4466b2ac514cf25b9aa
SHA1 b8512b6ad1d77e9d662fdfa11ee92e2d091117ed
SHA512 5733e2eca6f72e5d8484b12956071ffdd5d8a78342c46483636823924b9e18b89ff5069cb1db6c24a678aaf11529cdd005071ea6e795446bd45a5ff802da4620
SSDEEP 1536:M7YXIiRiC5rbhNUWF6G9P3ySzCFTboIDTbEubBLcVeaRMia6HULrQIZp6U19pVVQ:M7Y6CtUWFVCFfPoVe+Minmrr/R9pm
TLSH
T107D3181027EDA126F5F32BB0867EA2655A7ABE645F31D3CF1200999E6C71AC0C930737
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__23ef5d158d11c4466b2ac514cf25b9aa

File Explorer

jaffacakes118__23ef5d158d11c4466b2ac514cf25b9aa

.exe 137KB

jaffacakes118__23ef5d158d11c4466b2ac514cf25b9aa

IMPHASH 4a65f625c025095eca20a743d74ca6fa
SHA256 4a98a5dbbbb2666f3d89be700ad42dd45c327b27346da35b93b528ba3ab2c4c8
MD5 23ef5d158d11c4466b2ac514cf25b9aa
SHA1 b8512b6ad1d77e9d662fdfa11ee92e2d091117ed
SHA512 5733e2eca6f72e5d8484b12956071ffdd5d8a78342c46483636823924b9e18b89ff5069cb1db6c24a678aaf11529cdd005071ea6e795446bd45a5ff802da4620
SSDEEP 1536:M7YXIiRiC5rbhNUWF6G9P3ySzCFTboIDTbEubBLcVeaRMia6HULrQIZp6U19pVVQ:M7Y6CtUWFVCFfPoVe+Minmrr/R9pm
TLSH
T107D3181027EDA126F5F32BB0867EA2655A7ABE645F31D3CF1200999E6C71AC0C930737
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

54530

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

setupugc.pdb

advapi32

RegCloseKey RegOpenKeyExW RegEnumKeyExW RegQueryInfoKeyW GetTraceEnableFlags GetTraceEnableLevel GetTraceLoggerHandle UnregisterTraceGuids TraceEvent RegCreateKeyExW RegisterTraceGuidsW AdjustTokenPrivileges RegEnumKeyW RegEnumValueW RegDeleteValueW RegDeleteKeyW RegQueryValueExW RegSetValueExW OpenProcessToken LookupPrivilegeValueW

kernel32

CreateProcessW GetExitCodeProcess LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection SetErrorMode OpenEventW FindNextFileW FindClose GetFileAttributesW RemoveDirectoryW SetFileAttributesW CreateDirectoryW GetCurrentDirectoryW GetFullPathNameW CreateFileW DeviceIoControl LoadLibraryW FreeLibrary ExpandEnvironmentStringsW UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter GetModuleHandleA SetUnhandledExceptionFilter GetStartupInfoW InterlockedCompareExchange Sleep InterlockedExchange SetVolumeLabelW GetModuleFileNameW CreateEventW CreateThread WaitForSingleObject CloseHandle SetEvent MulDiv SetLastError lstrlenW GetVersionExW GetModuleHandleW GetProcAddress HeapAlloc CompareStringW GetWindowsDirectoryW SetComputerNameExW GetLastError GetProcessHeap HeapFree FindFirstFileW

gdi32

GetDeviceCaps CreateFontIndirectW GetObjectW GetTextExtentPoint32W DeleteObject

user32

SetWindowPos LoadStringW SendMessageW IsWindow MapWindowPoints SetWindowTextW SendDlgItemMessageW CreateWindowExW ReleaseDC GetWindowDC GetWindowRect GetDlgItem GetDC PostMessageW ShowWindow SystemParametersInfoW SetDlgItemTextW EndDialog LoadImageW DispatchMessageW TranslateMessage GetMessageW CreateDialogParamW

msvcrt

__p__commode __p__fmode __set_app_type _unlock __dllonexit _lock _onexit ?terminate@@YAXXZ _except_handler4_common _controlfp _vsnprintf memmove _wcsnicmp wcschr __setusermatherr _vscwprintf wcsrchr wcscspn wcsspn iswalpha _amsg_exit _initterm _wcmdln exit _XcptFilter _exit _cexit __wgetmainargs qsort _wtoi iswdigit iswspace _vsnwprintf memset

ole32

CoInitializeEx CoTaskMemFree CoUninitialize CoCreateInstance

dnsapi

DnsValidateName_W

wdscore

WdsValidBlackboard WdsInitialize WdsCreateBlackboard WdsFreeData WdsSetBlackboardValue WdsInitializeDataStringW WdsGetBlackboardValue WdsInitializeDataUInt32 WdsDeleteBlackboardValue WdsAbortBlackboardItemEnum WdsEnumFirstBlackboardItem WdsDestroyBlackboard WdsTerminate

rpcrt4

UuidCreate UuidToStringW RpcStringFreeW

ntdll

NtSetInformationFile RtlNtStatusToDosError RtlInitUnicodeString NtOpenFile NtDeviceIoControlFile NtClose RtlFreeHeap RtlAllocateHeap NtQuerySystemInformation

mpr

WNetAddConnection2W WNetCancelConnection2W

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__23ef5d158d11c4466b2ac514cf25b9aa

advapi32

kernel32

gdi32

user32

msvcrt

ole32

dnsapi

wdscore

rpcrt4

ntdll

mpr

generic