jaffacakes118_3b39ca09ee724de96702b2bd46d3e172

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_3b39ca09ee724de96702b2bd46d3e172
Size 242KB
Sample260921-p1s8eaaf67
SHA256 b4e771ee4eb216b0312e9623fefa90123284e9416557e034916a11faa156acaf
MD5 3b39ca09ee724de96702b2bd46d3e172
SHA1 5a2eaa56fe3398678ebc8040a13e747799d1e238
SHA512 5e990c90a2d4281e4df8650a065456e7f37a2c27e0c66a093b1c403fe1b45ac84f7ceb6e39f0982880bd4d9097599eb0cb5606297091c97d53d6ad3dc0662b27
SSDEEP 6144:ZvZR8D2L+mqP/lH8nNnlfttDkJsZLX0tTMPd/:ZvZiqL+mUwXTIoLX0tgPd/
TLSH
T1F03412233B931DF7E1271EF4899EE510E6BDE64B83038C2E15041C5B6E17A505FBAA4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_3b39ca09ee724de96702b2bd46d3e172

File Explorer

jaffacakes118_3b39ca09ee724de96702b2bd46d3e172

.exe 242KB

jaffacakes118_3b39ca09ee724de96702b2bd46d3e172

IMPHASH 877a9fc2fb535473e4afdd10f8d5f137
SHA256 b4e771ee4eb216b0312e9623fefa90123284e9416557e034916a11faa156acaf
MD5 3b39ca09ee724de96702b2bd46d3e172
SHA1 5a2eaa56fe3398678ebc8040a13e747799d1e238
SHA512 5e990c90a2d4281e4df8650a065456e7f37a2c27e0c66a093b1c403fe1b45ac84f7ceb6e39f0982880bd4d9097599eb0cb5606297091c97d53d6ad3dc0662b27
SSDEEP 6144:ZvZR8D2L+mqP/lH8nNnlfttDkJsZLX0tTMPd/:ZvZiqL+mUwXTIoLX0tgPd/
TLSH
T1F03412233B931DF7E1271EF4899EE510E6BDE64B83038C2E15041C5B6E17A505FBAA4E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

873200

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FatalAppExitA GetVersionExW GetCurrentThreadId GetProcAddress CreateMutexA ReplaceFileW LoadLibraryExA lstrcpyW GetSystemDefaultLCID IsDebuggerPresent HeapCreate CreatePipe GetEnvironmentVariableA FindResourceW lstrlenA GetThreadPriority FindAtomW GetCPInfo GetTempFileNameA

user32

EndMenu CreatePopupMenu MonitorFromWindow CreateMenu AdjustWindowRect WinHelpA InsertMenuItemA MoveWindow GetMenuInfo LoadMenuA DialogBoxParamW GetKeyboardLayout GetKeyState GetDCEx IsMenu UpdateLayeredWindow EnableWindow CreateDialogParamA RegisterClassW DefWindowProcA GetSubMenu PostQuitMessage CharLowerA GetActiveWindow CopyRect RegisterWindowMessageW LoadCursorA LoadImageA SendDlgItemMessageW GetCursorPos WaitMessage GetFocus OpenClipboard UnregisterClassW CreateDialogIndirectParamW GetCaretPos FindWindowA SetActiveWindow CharUpperW GetWindowRgn keybd_event DestroyIcon GetClassInfoExA GetDesktopWindow FindWindowW LoadBitmapA LoadIconW EnumClipboardFormats GetIconInfo IsIconic AppendMenuW RegisterClassA SetWindowPos MessageBeep LoadMenuW CreateWindowExW MessageBoxW GetMenuItemInfoW SendDlgItemMessageA GetDlgItemInt CharLowerW DestroyMenu GetMenuItemRect MonitorFromRect GetClassInfoExW RegisterClassExW GetDlgItemTextA GetCapture MonitorFromPoint IsChild GetScrollPos CharPrevA SetDlgItemTextA TrackPopupMenu DestroyCursor CreateAcceleratorTableA MessageBoxA RegisterWindowMessageA IsDlgButtonChecked

gdi32

RemoveFontResourceA CreateHatchBrush CreatePolygonRgn CreateColorSpaceW GetEnhMetaFileW CreateDIBPatternBrushPt CreateFontIndirectA CreateDIBPatternBrush

shell32

ExtractAssociatedIconExW StrRChrA ExtractIconW ShellExecuteExA SHGetDiskFreeSpaceExW FreeIconList ShellExecuteEx StrRStrIW SHCreateDirectoryExA SHGetDataFromIDListW SHGetDiskFreeSpaceA StrStrIA StrNCmpIA StrRStrW ShellExecuteW

Name

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.jC

Size

4KB

Virtual Size

163KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.LRK

Size

1KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

3KB

Virtual Size

486KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ucKPZR

Size

92KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pWz

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.sjcOq

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.an

Size

12KB

Virtual Size

377KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

2KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_3b39ca09ee724de96702b2bd46d3e172

kernel32

user32

gdi32

shell32

generic