jaffacakes118__1edbe72e21f6cc2fc6d4e68a86f5c743

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__1edbe72e21f6cc2fc6d4e68a86f5c743
Size 242KB
Sample260921-d33dbavv6k
SHA256 d78d9e9998c9f533749111e5e68a5ed4fae798e9cb68a8b072c18b8fff827eea
MD5 1edbe72e21f6cc2fc6d4e68a86f5c743
SHA1 6121e8659e3c9a6f39e3c3076dd40a3402875d7d
SHA512 1f79292ff3441270e78a5ef69a5ddf64aef7966ed190b8da3dbffa687043c42686d06d2544f091fbfc450c2bbb58b7b65b8be599cc93f15ecda2cb91b12eba5a
SSDEEP 6144:tzTpocAXXe8jEDKOF64+VHKdrJ3KN47gUDuMsRj+OcjS:tztSlEDKO44+JKBs408ulQOc+
TLSH
T1F534129AAA758EBBCC926337C0EC9B11262AECFC0707E25F524518DE0C16F4B3D961D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__1edbe72e21f6cc2fc6d4e68a86f5c743

File Explorer

jaffacakes118__1edbe72e21f6cc2fc6d4e68a86f5c743

.exe 242KB

jaffacakes118__1edbe72e21f6cc2fc6d4e68a86f5c743

IMPHASH 1a1d8d7f417296b009becfa935c8b7a4
SHA256 d78d9e9998c9f533749111e5e68a5ed4fae798e9cb68a8b072c18b8fff827eea
MD5 1edbe72e21f6cc2fc6d4e68a86f5c743
SHA1 6121e8659e3c9a6f39e3c3076dd40a3402875d7d
SHA512 1f79292ff3441270e78a5ef69a5ddf64aef7966ed190b8da3dbffa687043c42686d06d2544f091fbfc450c2bbb58b7b65b8be599cc93f15ecda2cb91b12eba5a
SSDEEP 6144:tzTpocAXXe8jEDKOF64+VHKdrJ3KN47gUDuMsRj+OcjS:tztSlEDKO44+JKBs408ulQOc+
TLSH
T1F534129AAA758EBBCC926337C0EC9B11262AECFC0707E25F524518DE0C16F4B3D961D5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVersion CreateMutexA GetStringTypeA VirtualAlloc GetProcessHeap OpenEventA GetSystemDefaultLangID GetFileAttributesA LocalAlloc GetFileAttributesW CopyFileA GetExitCodeThread GlobalDeleteAtom GetCurrentThreadId EnumCalendarInfoW IsBadStringPtrA GetProcessHeaps GetHandleInformation ExitThread IsValidLocale FindAtomW TlsAlloc ReplaceFileW lstrcatA IsBadCodePtr lstrcpyA GlobalGetAtomNameW lstrcpynW FreeResource IsValidCodePage ConnectNamedPipe GetSystemDefaultLCID SetErrorMode OpenMutexW CreateFiber CompareStringA QueryPerformanceCounter GetCommandLineA CopyFileExW GetNamedPipeInfo GlobalGetAtomNameA EnumDateFormatsW

user32

LoadCursorA CreateDesktopA EnableMenuItem CreateAcceleratorTableW SetWindowRgn UnregisterClassW SetWindowTextW GetSystemMetrics GetClassInfoExA CheckMenuItem

gdi32

AddFontResourceA SelectObject GetCurrentPositionEx WidenPath CreateHatchBrush GetTextExtentExPointI CreateDIBPatternBrushPt GetEnhMetaFileDescriptionW TranslateCharsetInfo

advapi32

RegOpenKeyExW RegFlushKey RegReplaceKeyA RegSaveKeyW RegQueryValueW RegDeleteValueW

setupapi

SetupDiGetHwProfileList SetupDiSetClassInstallParamsW SetupQueryInfVersionInformationW SetupDiGetCustomDevicePropertyW SetupDiGetClassImageListExW CM_Open_Class_Key_ExA SetupQueueCopyIndirectA CM_Enumerate_Enumerators_ExA SetupQuerySpaceRequiredOnDriveW

inetcomm

MimeOleSMimeCapInit HrAthGetFileNameW MimeEditDocumentFromStream MimeOleSetPropA MimeEditCreateMimeDocument MimeOleCreatePropertySet MimeOleSMimeCapAddSMimeCap MimeOleGenerateMID MimeOleGetContentTypeExt

wsock32

connect __WSAFDIsSet getservbyport sendto inet_addr getnetbyname ntohs inet_ntoa GetAcceptExSockaddrs WSAAsyncSelect rexec getsockopt WSARecvEx

Name

.cM3/J

Size

11KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.k,?

Size

2KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.)#

Size

1024B

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.6wWGX

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.&m2

Size

2KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bb

Size

1KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

3KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.Q7

Size

2KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.)I8

Size

2KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

210KB

Virtual Size

210KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

690B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__1edbe72e21f6cc2fc6d4e68a86f5c743

kernel32

user32

gdi32

advapi32

setupapi

inetcomm

wsock32

generic