jaffacakes118_d916a16eca141685dc128e8d726d5eae24202ffe9737a1f80b496d1bd6f11ecc[.]bin

General

Target
jaffacakes118_d916a16eca141685dc128e8d726d5eae24202ffe9737a1f80b496d1bd6f11ecc.bin
Size 1.4MB
Sample260924-jctalsgh37
SHA256 d916a16eca141685dc128e8d726d5eae24202ffe9737a1f80b496d1bd6f11ecc
MD5 fbdfc3ba820672bd5515398d481675d6
SHA1 224cac9881720f59dbadc7dfb6f3774fc99ff6cf
SHA512 d52e5b9447028e3b7a44d1ef3b19ca8b0ed1f8a346dde87ce67804288baa303ffaa76a0b873ca38fbac3e266f453056360b800f14a90f673e8da30760074fecf
SSDEEP 24576:7XSiHdm7u8vnjE7raUrV10CRtQOdS2Bi/TUHbNZDdTN9+YodOLOCnZz:Oi9mZzUBVRtQ1Mi/TqhTN0Y
TLSH
T16E65125078A08836E47105734B60CBB85A7F79300B19AEEBA7D45F6ECFB12D26E34D61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_d916a16eca141685dc128e8d726d5eae24202ffe9737a1f80b496d1bd6f11ecc.bin

File Explorer

jaffacakes118_d916a16eca141685dc128e8d726d5eae24202ffe9737a1f80b496d1bd6f11ecc.bin

.exe 1.4MB

jaffacakes118_d916a16eca141685dc128e8d726d5eae24202ffe9737a1f80b496d1bd6f11ecc.bin

IMPHASH 1f21c4dae1d8bdc5f5b4dc1d200a0bc1
SHA256 d916a16eca141685dc128e8d726d5eae24202ffe9737a1f80b496d1bd6f11ecc
MD5 fbdfc3ba820672bd5515398d481675d6
SHA1 224cac9881720f59dbadc7dfb6f3774fc99ff6cf
SHA512 d52e5b9447028e3b7a44d1ef3b19ca8b0ed1f8a346dde87ce67804288baa303ffaa76a0b873ca38fbac3e266f453056360b800f14a90f673e8da30760074fecf
SSDEEP 24576:7XSiHdm7u8vnjE7raUrV10CRtQOdS2Bi/TUHbNZDdTN9+YodOLOCnZz:Oi9mZzUBVRtQ1Mi/TqhTN0Y
TLSH
T16E65125078A08836E47105734B60CBB85A7F79300B19AEEBA7D45F6ECFB12D26E34D61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

53966

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ole32

CoGetObjectContext CoGetApartmentType

kernel32

CreateFileW HeapSize Sleep TerminateJobObject GetStringTypeW FreeConsole RaiseException InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW WideCharToMultiByte MultiByteToWideChar InitOnceBeginInitialize InitOnceComplete GetLastError FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter CloseHandle WaitForSingleObjectEx EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress WriteConsoleW GetCPInfo InitializeCriticalSectionAndSpinCount SetEvent ResetEvent CreateEventW IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead SetStdHandle RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapFree HeapAlloc CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap

Sharing