jaffacakes118_69142f1f45e787bf9f13ca1a093d55d329c7ac6fedff3e4b57416dcee34eb1fc[.]bin

General

Target
jaffacakes118_69142f1f45e787bf9f13ca1a093d55d329c7ac6fedff3e4b57416dcee34eb1fc.bin
Size 317KB
Sample260924-1r52dsshph
SHA256 69142f1f45e787bf9f13ca1a093d55d329c7ac6fedff3e4b57416dcee34eb1fc
MD5 66062a72691e397722d9390cb67b0c40
SHA1 dd11ac2479f93e4c20b12c1b27ff0a641c0cd463
SHA512 637d4a49ca49504d5a3959b69e140bbf5d825a12a281d5e3044f50d4f4dd24045a66da372837218c560b987b3f0eb45e113e4eff1a74850e8916883e651d145e
SSDEEP 3072:TqmnT50g5IkHN7wwJdZp1tVULvFTDczNrAu8FcXQcVlcXDZqJVm:NR5IkHiwJdttVOyzeB1cVk
TLSH
T184647DD353D468B2E5224E718E2AF6F42A1EB8614F1537EBE764DA2F05BC1E1E132311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_69142f1f45e787bf9f13ca1a093d55d329c7ac6fedff3e4b57416dcee34eb1fc.bin

File Explorer

jaffacakes118_69142f1f45e787bf9f13ca1a093d55d329c7ac6fedff3e4b57416dcee34eb1fc.bin

.exe 317KB

jaffacakes118_69142f1f45e787bf9f13ca1a093d55d329c7ac6fedff3e4b57416dcee34eb1fc.bin

IMPHASH 956d4bfad20bab24e49b479aaad17e29
SHA256 69142f1f45e787bf9f13ca1a093d55d329c7ac6fedff3e4b57416dcee34eb1fc
MD5 66062a72691e397722d9390cb67b0c40
SHA1 dd11ac2479f93e4c20b12c1b27ff0a641c0cd463
SHA512 637d4a49ca49504d5a3959b69e140bbf5d825a12a281d5e3044f50d4f4dd24045a66da372837218c560b987b3f0eb45e113e4eff1a74850e8916883e651d145e
SSDEEP 3072:TqmnT50g5IkHN7wwJdZp1tVULvFTDczNrAu8FcXQcVlcXDZqJVm:NR5IkHiwJdttVOyzeB1cVk
TLSH
T184647DD353D468B2E5224E718E2AF6F42A1EB8614F1537EBE764DA2F05BC1E1E132311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

35374

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDriveTypeW EnumCalendarInfoW MoveFileExW InterlockedDecrement GetEnvironmentStringsW SetHandleInformation GetProfileStringW SetVolumeMountPointW GetComputerNameW OpenSemaphoreA BackupSeek FreeEnvironmentStringsA GetModuleHandleW GenerateConsoleCtrlEvent GetConsoleAliasesLengthA GetConsoleAliasExesW EnumTimeFormatsA TzSpecificLocalTimeToSystemTime GetConsoleCP GlobalAlloc LoadLibraryW FatalAppExitW GetCalendarInfoW EnumSystemCodePagesA TerminateProcess GetStartupInfoW RaiseException CreateJobObjectA GetPrivateProfileIntW InterlockedExchange FindFirstFileA GetNumaProcessorNode PeekConsoleInputW OpenMutexA GetProcessId LocalAlloc MoveFileA BuildCommDCBAndTimeoutsW GetNumberFormatW AddAtomW RemoveDirectoryW GlobalGetAtomNameW FindNextFileA EnumDateFormatsA GlobalUnWire GetModuleHandleA SetLocaleInfoW EnumResourceNamesA CreateMailslotA GetStringTypeW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW GetShortPathNameW FindAtomW FindFirstVolumeW DeleteFileW AddConsoleAliasA ReadFile WriteConsoleW FlushFileBuffers GetVolumeNameForVolumeMountPointA SetDefaultCommConfigA GetFileSize GetCommandLineW GetLastError InterlockedIncrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetProcAddress ExitProcess HeapSetInformation RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess IsProcessorFeaturePresent HeapCreate WriteFile GetStdHandle GetModuleFileNameW InitializeCriticalSectionAndSpinCount GetLocaleInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize CloseHandle FreeEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc SetFilePointer GetConsoleMode SetStdHandle CreateFileW

user32

CharUpperW LoadMenuW

gdi32

SelectPalette GetTextFaceW

advapi32

LookupAccountSidW

Sharing