jaffacakes118__114f29e819690690bf6c107028d57cc9

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__114f29e819690690bf6c107028d57cc9
Size 178KB
Sample260921-ltpd4afe86
SHA256 4467fbdea71eb3ca4f3ed32e5b214c7aad268fdd0c347a758a04919014098ffc
MD5 114f29e819690690bf6c107028d57cc9
SHA1 9987c77f407dd1d93d443e39aba70fc220ba750e
SHA512 eff23569bfce61531914e2042bfcb4680e297154c79e1ba985a8fe6656d370363ba62d8b0850366a89a427593681af5e74fc3e4d9316594693e1f9d0b8fdf1cc
SSDEEP 3072:hX7uC+dP3n7sb9i9Nxhh6+ZxODmhihD+ZC5rF5KW/4r9JrsSAFr:hSCWP37vnxhcyh6+ZCRF5KK4bU
TLSH
T1DD04F1F52886596BE1FCC43914E38476B6585A13D3A81AD2DE4447FE3B2034EDC1AFCA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__114f29e819690690bf6c107028d57cc9

File Explorer

jaffacakes118__114f29e819690690bf6c107028d57cc9

.exe 178KB

jaffacakes118__114f29e819690690bf6c107028d57cc9

IMPHASH 6e106b6a1d12c88876901e3b2f458378
SHA256 4467fbdea71eb3ca4f3ed32e5b214c7aad268fdd0c347a758a04919014098ffc
MD5 114f29e819690690bf6c107028d57cc9
SHA1 9987c77f407dd1d93d443e39aba70fc220ba750e
SHA512 eff23569bfce61531914e2042bfcb4680e297154c79e1ba985a8fe6656d370363ba62d8b0850366a89a427593681af5e74fc3e4d9316594693e1f9d0b8fdf1cc
SSDEEP 3072:hX7uC+dP3n7sb9i9Nxhh6+ZxODmhihD+ZC5rF5KW/4r9JrsSAFr:hSCWP37vnxhcyh6+ZCRF5KK4bU
TLSH
T1DD04F1F52886596BE1FCC43914E38476B6585A13D3A81AD2DE4447FE3B2034EDC1AFCA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

gdiplus

GdipGetImageWidth GdipDisposeImage

kernel32

GetLastError GetCalendarInfoW InterlockedExchange MapViewOfFile ExitProcess SetLastError UnhandledExceptionFilter GetProcessId FreeLibrary GetModuleFileNameW SetFileAttributesW Sleep GetTickCount LoadLibraryW FindClose EnterCriticalSection ReleaseMutex lstrcmpiW GetModuleHandleW GetFileAttributesW DuplicateHandle GetModuleHandleA lstrlenW FindFirstFileW EnumResourceNamesA VirtualQuery SearchPathW GetProcAddress OpenProcess VirtualProtect WaitForSingleObject UnmapViewOfFile IsWow64Process CreateDirectoryW GetCurrentDirectoryW GetCurrentProcess GetSystemTimeAsFileTime GetLogicalDriveStringsW LocalAlloc WideCharToMultiByte OutputDebugStringA SetEnvironmentVariableW GetCurrentThreadId MultiByteToWideChar LocalFree InitializeCriticalSection SetUnhandledExceptionFilter InterlockedCompareExchange QueryDosDeviceW OutputDebugStringW GetFileInformationByHandle GetFileSizeEx QueryPerformanceCounter FindNextFileW CreateFileMappingW EncodePointer CreateMutexW

shlwapi

PathGetArgsW StrDupW SHRegGetValueW PathSkipRootW PathIsUNCW PathFindFileNameW

ole32

CoGetDefaultContext CoInitialize CoUninitialize StringFromGUID2 CoTaskMemAlloc CoTaskMemFree

advapi32

RegEnumKeyW EncryptFileW RegOpenKeyExW DecryptFileW RegQueryInfoKeyW RegEnumValueW RegCreateKeyExW RegQueryValueExW RegSetValueExW RegCloseKey

user32

GetPropW GetClassNameW GetGUIThreadInfo AllowSetForegroundWindow GetWindowThreadProcessId GetForegroundWindow

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__114f29e819690690bf6c107028d57cc9

gdiplus

kernel32

shlwapi

ole32

advapi32

user32

generic