jaffacakes118_1549964110c27404e1ad0cf420caf53eaf641186ef82b8202bf72b81bf875ce9[.]bin

General

Target
jaffacakes118_1549964110c27404e1ad0cf420caf53eaf641186ef82b8202bf72b81bf875ce9.bin
Size 391KB
Sample260922-tv38msac98
SHA256 1549964110c27404e1ad0cf420caf53eaf641186ef82b8202bf72b81bf875ce9
MD5 9724a568af0d5c8cfae57f163557735f
SHA1 ed4aac8440e16d3a43dd8c42b81d8420e6e8ddb0
SHA512 8a13827545a54a322b9419b56d949d4466ed442e9b4bcab8a3de75759290cc77129edf2a27aa69ee7e4592b2482cbe390f72c311ae499b473a7391c66fc49c2f
SSDEEP 6144:1KUMjzsPCbww17bmxUa3feAOowfispcm/VoXdHg5nd9oB03BkmX7owFYyUi:1KUKsPCbwwq23zplKEndM0RkmbYyUi
TLSH
T18284BF00BCD0C476C836557129E9D7E596BEBCB1CA240B9F2781CE2E0F65294CA7B787
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_1549964110c27404e1ad0cf420caf53eaf641186ef82b8202bf72b81bf875ce9.bin

File Explorer

jaffacakes118_1549964110c27404e1ad0cf420caf53eaf641186ef82b8202bf72b81bf875ce9.bin

.exe 391KB

jaffacakes118_1549964110c27404e1ad0cf420caf53eaf641186ef82b8202bf72b81bf875ce9.bin

IMPHASH 07369f734c0325aae69a2991bce41551
SHA256 1549964110c27404e1ad0cf420caf53eaf641186ef82b8202bf72b81bf875ce9
MD5 9724a568af0d5c8cfae57f163557735f
SHA1 ed4aac8440e16d3a43dd8c42b81d8420e6e8ddb0
SHA512 8a13827545a54a322b9419b56d949d4466ed442e9b4bcab8a3de75759290cc77129edf2a27aa69ee7e4592b2482cbe390f72c311ae499b473a7391c66fc49c2f
SSDEEP 6144:1KUMjzsPCbww17bmxUa3feAOowfispcm/VoXdHg5nd9oB03BkmX7owFYyUi:1KUKsPCbwwq23zplKEndM0RkmbYyUi
TLSH
T18284BF00BCD0C476C836557129E9D7E596BEBCB1CA240B9F2781CE2E0F65294CA7B787
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

36562

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

SetArcDirection GetFontLanguageInfo SetStretchBltMode

kernel32

Sleep GetConsoleWindow MultiByteToWideChar GetStringTypeW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW CreateFileW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap ReadConsoleW HeapSize WriteConsoleW

Sharing