jaffacakes118_931a71a3a20344bba3c7587004d1be1f6be93090e530814960d938d48e1e6202[.]bin

General

Target
jaffacakes118_931a71a3a20344bba3c7587004d1be1f6be93090e530814960d938d48e1e6202.bin
Size 1.4MB
Sample260924-ht2smsgd23
SHA256 931a71a3a20344bba3c7587004d1be1f6be93090e530814960d938d48e1e6202
MD5 69e6c77264336d21fb9a44bdf649b171
SHA1 e50327f456f531319253cecf45c5855ba668b5ee
SHA512 82c2ffd09bc0094f6217630ed3596dc41b263928903790d7642edc49334683238169d9d2259807cbdb4c70b2ba80b0d3bdc94bd3a0f2425414a92b009f3bb84a
SSDEEP 24576:qWVkfGnbsU4gtm4I2bxKR5Obi1BCaUPq3C2ylgHOS7k+uahYRTVx0mSIMGBDYjKh:rkubshf4IqmOKBz+q3C2ywJuahYAmSCj
TLSH
T10965122276C0C372D563053386A8AAB5BA7DF4B2472645DFC3D74BAF8A103C1D7351AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_931a71a3a20344bba3c7587004d1be1f6be93090e530814960d938d48e1e6202.bin

File Explorer

jaffacakes118_931a71a3a20344bba3c7587004d1be1f6be93090e530814960d938d48e1e6202.bin

.exe 1.4MB

jaffacakes118_931a71a3a20344bba3c7587004d1be1f6be93090e530814960d938d48e1e6202.bin

IMPHASH 29c8b785823d6c11cf3aae5ebbb5f0e6
SHA256 931a71a3a20344bba3c7587004d1be1f6be93090e530814960d938d48e1e6202
MD5 69e6c77264336d21fb9a44bdf649b171
SHA1 e50327f456f531319253cecf45c5855ba668b5ee
SHA512 82c2ffd09bc0094f6217630ed3596dc41b263928903790d7642edc49334683238169d9d2259807cbdb4c70b2ba80b0d3bdc94bd3a0f2425414a92b009f3bb84a
SSDEEP 24576:qWVkfGnbsU4gtm4I2bxKR5Obi1BCaUPq3C2ylgHOS7k+uahYRTVx0mSIMGBDYjKh:rkubshf4IqmOKBz+q3C2ywJuahYAmSCj
TLSH
T10965122276C0C372D563053386A8AAB5BA7DF4B2472645DFC3D74BAF8A103C1D7351AA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

54748

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetForegroundWindow CreatePopupMenu FlashWindowEx

ole32

CoGetApartmentType CoGetObjectContext

kernel32

CreateFileW HeapSize ReadConsoleW SetStdHandle GetProcessHeap GetLastError RaiseException GetCurrentThreadId IsProcessorFeaturePresent FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW MultiByteToWideChar InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW InitOnceComplete InitOnceBeginInitialize GetStringTypeW InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WideCharToMultiByte CloseHandle WaitForSingleObjectEx GetExitCodeThread QueryPerformanceCounter EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress WriteConsoleW GetCPInfo InitializeCriticalSectionAndSpinCount SetEvent ResetEvent CreateEventW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead SetEnvironmentVariableW RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread ExitProcess GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW

Name

.text

Size

166KB

Virtual Size

165KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bsp

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_931a71a3a20344bba3c7587004d1be1f6be93090e530814960d938d48e1e6202.bin

user32

ole32

kernel32

generic