jaffacakes118_773f13820bed7cdcf0b2f7bc76b763d98028063c5d24a692f490ff917f112a51[.]bin

General

Target
jaffacakes118_773f13820bed7cdcf0b2f7bc76b763d98028063c5d24a692f490ff917f112a51.bin
Size 240KB
Sample260922-llm63ada73
SHA256 773f13820bed7cdcf0b2f7bc76b763d98028063c5d24a692f490ff917f112a51
MD5 4e4293eef8b0e029c92372f6e0ee222d
SHA1 04ab051dfd2ddede01a291603ede270128d20a2b
SHA512 c9ff94676214a2e6dcd1de4bca53a1e5f685780ad520bedfb58a54938c9b7ebd9a8cf088bcf247e4e12a5502cb6e4cfd52e861014dfd48d406284632d1b9ec71
SSDEEP 3072:FgMVJQEVOLxR7rxBxhyKqx2NHh60lvLClfhVudaEgi5jENHK1X5eX:Fg2G9R7HxhyKqENB6OaZMkEgYENi4
TLSH
T129347D0392D1BCA2FA2647729F1FC6EC7B5DB5508F496B6622189F2F15721B2C26F310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_773f13820bed7cdcf0b2f7bc76b763d98028063c5d24a692f490ff917f112a51.bin

File Explorer

jaffacakes118_773f13820bed7cdcf0b2f7bc76b763d98028063c5d24a692f490ff917f112a51.bin

.exe 240KB

jaffacakes118_773f13820bed7cdcf0b2f7bc76b763d98028063c5d24a692f490ff917f112a51.bin

IMPHASH 7e12c3437927282853f4831206fd4e89
SHA256 773f13820bed7cdcf0b2f7bc76b763d98028063c5d24a692f490ff917f112a51
MD5 4e4293eef8b0e029c92372f6e0ee222d
SHA1 04ab051dfd2ddede01a291603ede270128d20a2b
SHA512 c9ff94676214a2e6dcd1de4bca53a1e5f685780ad520bedfb58a54938c9b7ebd9a8cf088bcf247e4e12a5502cb6e4cfd52e861014dfd48d406284632d1b9ec71
SSDEEP 3072:FgMVJQEVOLxR7rxBxhyKqx2NHh60lvLClfhVudaEgi5jENHK1X5eX:Fg2G9R7HxhyKqENB6OaZMkEgYENi4
TLSH
T129347D0392D1BCA2FA2647729F1FC6EC7B5DB5508F496B6622189F2F15721B2C26F310
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

15616

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fovorus19_fib\meya13_poko.pdb

kernel32

GetCPInfo GetProcessIoCounters WriteConsoleOutputCharacterA WriteConsoleInputA SetComputerNameW AddConsoleAliasW FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCompressedFileSizeW GlobalAlloc LoadLibraryW SizeofResource SetVolumeMountPointA GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetNamedPipeInfo GetFileAttributesW GetVolumePathNameA GetLargestConsoleWindowSize ReleaseActCtx FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc PeekConsoleInputW PeekNamedPipe EnumSystemCodePagesW GlobalFree GetNumberFormatW AddAtomW RemoveDirectoryW SetFileApisToANSI BeginUpdateResourceA FoldStringA FindNextFileA GetModuleHandleA FindFirstChangeNotificationA VirtualProtect _lopen GetWindowsDirectoryW GetCurrentProcessId GlobalAddAtomW OpenFileMappingA WriteConsoleW GetConsoleOutputCP WriteConsoleA GetConsoleAliasesLengthW BackupWrite GetComputerNameA HeapFree GetCommandLineA GetStartupInfoA HeapAlloc RaiseException HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetACP GetOEMCP IsValidCodePage LoadLibraryA CloseHandle CreateFileA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle SetFilePointer SetEndOfFile GetProcessHeap ReadFile

user32

GetWindowTextLengthA LoadMenuW ChangeDisplaySettingsA CharToOemBuffA

gdi32

GetCharABCWidthsFloatA

advapi32

RegOpenKeyA

Sharing