jaffacakes118_44b1f832695142475f3f84ede97f0bb540992d020318b14eac01e54344cb404c[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_44b1f832695142475f3f84ede97f0bb540992d020318b14eac01e54344cb404c.bin
Size 68KB
Sample260924-lrv4vsaf97
SHA256 44b1f832695142475f3f84ede97f0bb540992d020318b14eac01e54344cb404c
MD5 1ef37274f4fdb80f40d6fbb273162dc0
SHA1 fdfb7eabfe19d14c41870a04e0d830d7b9b2eba6
SHA512 78416390d2967e33c042b2f4ee66cb15839e31510ce9a0d6f23a5b63674de681151ed2167d3c158153434ea4af6324b992f62e63c4fd6f00d640b995faaadbc4
SSDEEP 768:9sOh1uAOrKJ4oQH1qjjjxZrqISU3zgv8Dq5ks1HArKTqO56r:KRAOry4oKqzrKub856r
TLSH
T1D9636B133862C472C49244714D66C7C65BFFBD136AB9A00BBBD80A4F6F736D98A36361
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_44b1f832695142475f3f84ede97f0bb540992d020318b14eac01e54344cb404c.bin

File Explorer

jaffacakes118_44b1f832695142475f3f84ede97f0bb540992d020318b14eac01e54344cb404c.bin

.exe 68KB

jaffacakes118_44b1f832695142475f3f84ede97f0bb540992d020318b14eac01e54344cb404c.bin

IMPHASH 60f8f545f4e66ba32423ebf17253319a
SHA256 44b1f832695142475f3f84ede97f0bb540992d020318b14eac01e54344cb404c
MD5 1ef37274f4fdb80f40d6fbb273162dc0
SHA1 fdfb7eabfe19d14c41870a04e0d830d7b9b2eba6
SHA512 78416390d2967e33c042b2f4ee66cb15839e31510ce9a0d6f23a5b63674de681151ed2167d3c158153434ea4af6324b992f62e63c4fd6f00d640b995faaadbc4
SSDEEP 768:9sOh1uAOrKJ4oQH1qjjjxZrqISU3zgv8Dq5ks1HArKTqO56r:KRAOry4oKqzrKub856r
TLSH
T1D9636B133862C472C49244714D66C7C65BFFBD136AB9A00BBBD80A4F6F736D98A36361
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12679

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

InitCommonControlsEx

msi

ord113

kernel32

CloseHandle MapViewOfFileEx GetExitCodeThread GetModuleFileNameW LockResource Sleep CreateFileW DeleteFileW GetModuleHandleW SizeofResource MoveFileW RemoveDirectoryW UnmapViewOfFile FormatMessageW MultiByteToWideChar FindResourceExW CreateFileMappingW FindResourceW GetFileSize WaitForSingleObject LoadResource CreateProcessW GetExitCodeProcess LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA GetLastError CreateDirectoryW LoadLibraryA InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale GetVersionExA RaiseException EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap ExitThread GetCurrentThreadId CreateThread GetCommandLineA GetStartupInfoA GetModuleHandleA GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree VirtualAlloc WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetOEMCP IsValidCodePage

user32

SetTimer SetWindowLongW KillTimer EndDialog GetWindowLongW SetWindowPos ShowWindow MessageBoxW SetFocus DialogBoxParamW UnregisterClassA

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey