jaffacakes118_20a875d31dd23f2f924aa472719e444e44ca503c1ecfeffb61c18cce4b294c03[.]bin

General

Target
jaffacakes118_20a875d31dd23f2f924aa472719e444e44ca503c1ecfeffb61c18cce4b294c03.bin
Size 249KB
Sample260922-aexw5stdre
SHA256 20a875d31dd23f2f924aa472719e444e44ca503c1ecfeffb61c18cce4b294c03
MD5 180a81ae48ee612b975aaa98afbf6c3a
SHA1 b3dae619a182144e8620e575ddd3db096ae2e803
SHA512 2204e53bb0fc7de64c8d94e4e3aa31217c877d00819f46c19b8d7316d5ef9976405c6acdbd456f7313a9e9208a9709d1d6c3ad0c9561f04295148831f0a55a09
SSDEEP 3072:sr4BBLyW1j2ZnjG56XMa0BJVwyK71eg3BnNe3R2zB/k:tLyWFSjG5raYVwL1e4NdzB/
TLSH
T19344198392D1BD91E9154B73CE2EC9F8B71EF9408E4A7B663118AF5F24B11F2D263610
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_20a875d31dd23f2f924aa472719e444e44ca503c1ecfeffb61c18cce4b294c03.bin

File Explorer

jaffacakes118_20a875d31dd23f2f924aa472719e444e44ca503c1ecfeffb61c18cce4b294c03.bin

.exe 249KB

jaffacakes118_20a875d31dd23f2f924aa472719e444e44ca503c1ecfeffb61c18cce4b294c03.bin

IMPHASH 0a046e791e3122b7d021f9aaf3ba90b6
SHA256 20a875d31dd23f2f924aa472719e444e44ca503c1ecfeffb61c18cce4b294c03
MD5 180a81ae48ee612b975aaa98afbf6c3a
SHA1 b3dae619a182144e8620e575ddd3db096ae2e803
SHA512 2204e53bb0fc7de64c8d94e4e3aa31217c877d00819f46c19b8d7316d5ef9976405c6acdbd456f7313a9e9208a9709d1d6c3ad0c9561f04295148831f0a55a09
SSDEEP 3072:sr4BBLyW1j2ZnjG56XMa0BJVwyK71eg3BnNe3R2zB/k:tLyWFSjG5raYVwL1e4NdzB/
TLSH
T19344198392D1BD91E9154B73CE2EC9F8B71EF9408E4A7B663118AF5F24B11F2D263610
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

21221

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gigiloti\gomumi.pdb

kernel32

SetVolumeLabelA CreateFileA SearchPathW SetComputerNameExA GetConsoleAliasExesLengthA FindResourceW GlobalAddAtomA InterlockedIncrement SetConsoleTextAttribute GetConsoleAliasA GetModuleHandleW GetTickCount GetConsoleAliasesA GetWindowsDirectoryA GetPriorityClass GetVolumePathNameW LoadLibraryW TerminateThread ReadConsoleInputA SizeofResource GetSystemWindowsDirectoryA DeleteVolumeMountPointW EnumSystemCodePagesA IsProcessorFeaturePresent VerifyVersionInfoA lstrcatA GetConsoleAliasesW FillConsoleOutputCharacterA InterlockedFlushSList SetLastError BackupRead GetProcAddress VirtualAlloc CreateNamedPipeA RemoveDirectoryA CreateMemoryResourceNotification SetFileAttributesA PrepareTape OpenWaitableTimerA LocalAlloc GetNumberFormatW FoldStringA GlobalFindAtomW UpdateResourceW FreeEnvironmentStringsW VirtualProtect PeekConsoleInputA GetWindowsDirectoryW GetCurrentProcessId AddConsoleAliasA GetLastError LCMapStringW LCMapStringA Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapSize WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW

user32

CharToOemBuffA GetMessageExtraInfo

gdi32

GetCharABCWidthsFloatW

winhttp

WinHttpWriteData

Sharing