jaffacakes118_adf8dea5d36b58cf621e2bb0c4549f94e0919308dd7cc1215d942417c45e54a4[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_adf8dea5d36b58cf621e2bb0c4549f94e0919308dd7cc1215d942417c45e54a4.bin
Size 157KB
Sample260924-d417msdb56
SHA256 adf8dea5d36b58cf621e2bb0c4549f94e0919308dd7cc1215d942417c45e54a4
MD5 fbd929bfc7b4a9e4fa4506655bab4c4a
SHA1 b4df84de80729a04ed90dc976a3e730a568f24f8
SHA512 b310e79848dc2a3c6a4524e0b120e2e3dd73ecb6852c65a9eec368045f7bab0b141210726476dd3cb0c1d9008e1f34149f35c03a0156a9eef7d4a7fbc61ea1b4
SSDEEP 3072:wvai5HMU6xw7vzEHJ/24QFDhnVQf9v+vyz6w6R+tH+mqLLHCt6J/moZ27Pk:5i5X6xw7vzEHR24QzV+9v+TBe+stv7P
TLSH
T159F34B1EB190807FD9D240BC2175573297BF583817AA68C3DF60DE9A2CA97D6AF34243
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_adf8dea5d36b58cf621e2bb0c4549f94e0919308dd7cc1215d942417c45e54a4.bin

File Explorer

jaffacakes118_adf8dea5d36b58cf621e2bb0c4549f94e0919308dd7cc1215d942417c45e54a4.bin

.dll 157KB

jaffacakes118_adf8dea5d36b58cf621e2bb0c4549f94e0919308dd7cc1215d942417c45e54a4.bin

IMPHASH c38975be20fce0432f14f0d378ace8bb
SHA256 adf8dea5d36b58cf621e2bb0c4549f94e0919308dd7cc1215d942417c45e54a4
MD5 fbd929bfc7b4a9e4fa4506655bab4c4a
SHA1 b4df84de80729a04ed90dc976a3e730a568f24f8
SHA512 b310e79848dc2a3c6a4524e0b120e2e3dd73ecb6852c65a9eec368045f7bab0b141210726476dd3cb0c1d9008e1f34149f35c03a0156a9eef7d4a7fbc61ea1b4
SSDEEP 3072:wvai5HMU6xw7vzEHJ/24QFDhnVQf9v+vyz6w6R+tH+mqLLHCt6J/moZ27Pk:5i5X6xw7vzEHR24QzV+9v+TBe+stv7P
TLSH
T159F34B1EB190807FD9D240BC2175573297BF583817AA68C3DF60DE9A2CA97D6AF34243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

103273

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

WinHelpA SendMessageTimeoutA DdeFreeStringHandle PostMessageA wsprintfA TranslateMessage DestroyCursor DdeInitializeA DdeNameService DdeCreateStringHandleA DialogBoxParamA EnableWindow GetDlgItem LoadCursorA ShowWindow DestroyWindow RegisterClassA GetSysColor LoadBitmapA EndPaint LoadIconA IsWindowVisible ScreenToClient DrawEdge BeginPaint SetDlgItemTextA GetWindowRect SetWindowTextA EnableMenuItem EndDialog GetDlgItemTextA RedrawWindow GetMenuItemID GetMenuItemCount DefWindowProcA SetRect SetFocus DdeCreateDataHandle SendDlgItemMessageA DdeGetData SendMessageA DdeQueryStringA UpdateWindow DdeConnect SetWindowPos DdeDisconnect CreateDialogParamA DdeClientTransaction InvalidateRgn CreateDialogIndirectParamA DialogBoxIndirectParamA IsDialogMessageA SetCursor CreateWindowExA CharNextA ClientToScreen IsWindowEnabled PtInRect GetWindowTextA MoveWindow GetSystemMetrics SetForegroundWindow SetWindowLongA PeekMessageA GetDialogBaseUnits EnumChildWindows OemToCharA DrawTextA GetSystemMenu DrawIcon DrawFocusRect GetScrollRange CharUpperA DestroyIcon CharLowerA KillTimer MessageBeep SetTimer MapDialogRect MessageBoxA CheckRadioButton GetDC GetParent CallWindowProcA InvalidateRect ReleaseDC GetCursor GetWindowLongA GetClientRect FillRect DdeUninitialize GetMessageA DispatchMessageA

gdi32

GetObjectA CreatePalette SelectPalette RealizePalette GetBkColor SetTextAlign CreateScalableFontResourceA AddFontResourceA CreatePen MoveToEx LineTo GetTextMetricsA DeleteObject SaveDC RectVisible ExcludeClipRect CreateSolidBrush RestoreDC DeleteMetaFile SetBkMode CreateFontIndirectA SetMetaFileBitsEx GetTextExtentPointA SetBkColor SetTextColor ExtTextOutA GetStockObject GetDeviceCaps CreateCompatibleDC SetStretchBltMode CreateCompatibleBitmap SelectObject BitBlt SetMapMode GetViewportExtEx SetViewportExtEx SetViewportOrgEx PlayMetaFile StretchDIBits CreateBitmap CreatePatternBrush DeleteDC CreateBrushIndirect

advapi32

CloseServiceHandle OpenServiceA AccessCheck OpenThreadToken ImpersonateSelf RegDeleteValueA RegSetValueA OpenSCManagerA ControlService StartServiceA GetFileSecurityA RegDeleteKeyA RevertToSelf RegQueryValueExA RegQueryValueA RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegEnumKeyExA RegCloseKey

comdlg32

GetOpenFileNameA GetSaveFileNameA

version

GetFileVersionInfoA VerQueryValueA VerInstallFileA GetFileVersionInfoSizeA VerFindFileA

mpr

WNetGetConnectionA

winmm

midiOutGetNumDevs sndPlaySoundA waveOutGetNumDevs

shell32

ShellExecuteExA Shell_NotifyIconA

kernel32

GetEnvironmentStringsW DeleteFileA _lclose GetStartupInfoA GetFileType FreeEnvironmentStringsA SetHandleCount TlsGetValue GetStdHandle TlsFree TlsAlloc SetLastError GetCurrentThreadId LCMapStringW TlsSetValue GetStringTypeW GetStringTypeA LCMapStringA HeapReAlloc RtlUnwind VirtualFree HeapCreate VirtualAlloc GetEnvironmentVariableA GetModuleHandleA HeapDestroy TerminateProcess WideCharToMultiByte GetCurrentProcess ExitProcess LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection EnterCriticalSection GetSystemTime GetTimeZoneInformation GetCommandLineA SetEnvironmentVariableA HeapAlloc GetFullPathNameA InterlockedDecrement HeapFree InterlockedIncrement LocalFree GlobalHandle FormatMessageA GetLocalTime MoveFileExA OpenProcess MulDiv GetFileAttributesA GetDiskFreeSpaceA FileTimeToLocalFileTime FileTimeToDosDateTime GetFileTime LocalFileTimeToFileTime SetFileTime DosDateTimeToFileTime WriteFile ReadFile SetFilePointer FindClose FindNextFileA _lcreat SetCurrentDirectoryA GetLastError FindFirstFileA lstrcpynA WriteProfileStringA Sleep CreateFileA DeviceIoControl GetDriveTypeA WaitForSingleObject GetProfileStringA GetVolumeInformationA GetCurrentDirectoryA CreateDirectoryA lstrcmpA GlobalLock FreeEnvironmentStringsW GetEnvironmentStrings GlobalAlloc lstrlenA GetExitCodeProcess GetCurrentThread MultiByteToWideChar _lread GetSystemDirectoryA _lopen GetVersion GetVersionExA GetOEMCP GlobalFree GlobalUnlock GetACP CompareStringW CompareStringA GetCPInfo lstrcpyA SetErrorMode LoadLibraryExA GetWindowsDirectoryA CreateProcessA GlobalMemoryStatus SetFileAttributesA FreeLibrary lstrcatA CloseHandle GetModuleFileNameA LoadLibraryA _llseek GetPrivateProfileStringA WritePrivateProfileStringA GetProcAddress RemoveDirectoryA lstrcmpiA GetTempFileNameA GetTempPathA MoveFileA