jaffacakes118_0a81ab7ac20a3f89d25edaf38308b9df2730489c3b4c7cc2bda0decb96dc4e93[.]bin

General

Target
jaffacakes118_0a81ab7ac20a3f89d25edaf38308b9df2730489c3b4c7cc2bda0decb96dc4e93.bin
Size 270KB
Sample260925-v3fb8att7j
SHA256 0a81ab7ac20a3f89d25edaf38308b9df2730489c3b4c7cc2bda0decb96dc4e93
MD5 c354cf51778bfa7bc513e003f9792ce8
SHA1 c33b5fe70b2e656a3cf7b3882029c3bee0f621bb
SHA512 0dba9b6a2b9248cd3f7724e62ee0c27fa18ac7a53b234f1a52f0fefcec9880380ff89db9089492e73b6c0d09fd72e98a30378aaeac0b2000a3402fa23b28e28b
SSDEEP 3072:wTSs2dLJqE+U876blzerrfBCuheGRLOPWqm83gWSruRF3rf2DFIKj:qSNdLJDQ6blqE6TpOPWqRgO3rf2DFb
TLSH
T181445A1362E0BC60D5265B729F2EAAEC776EF451CE16A75A33185E1F09732F2C523312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_0a81ab7ac20a3f89d25edaf38308b9df2730489c3b4c7cc2bda0decb96dc4e93.bin

File Explorer

jaffacakes118_0a81ab7ac20a3f89d25edaf38308b9df2730489c3b4c7cc2bda0decb96dc4e93.bin

.exe 270KB

jaffacakes118_0a81ab7ac20a3f89d25edaf38308b9df2730489c3b4c7cc2bda0decb96dc4e93.bin

IMPHASH 90fb6941c29b42284dd514860dcb5b24
SHA256 0a81ab7ac20a3f89d25edaf38308b9df2730489c3b4c7cc2bda0decb96dc4e93
MD5 c354cf51778bfa7bc513e003f9792ce8
SHA1 c33b5fe70b2e656a3cf7b3882029c3bee0f621bb
SHA512 0dba9b6a2b9248cd3f7724e62ee0c27fa18ac7a53b234f1a52f0fefcec9880380ff89db9089492e73b6c0d09fd72e98a30378aaeac0b2000a3402fa23b28e28b
SSDEEP 3072:wTSs2dLJqE+U876blzerrfBCuheGRLOPWqm83gWSruRF3rf2DFIKj:qSNdLJDQ6blqE6TpOPWqRgO3rf2DFb
TLSH
T181445A1362E0BC60D5265B729F2EAAEC776EF451CE16A75A33185E1F09732F2C523312
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

25658

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wupiwazixo\pavexinevuci\buyajo\pih18\cobu\todo.pdb

kernel32

GetDateFormatW FindFirstChangeNotificationW GetConsoleAliasesLengthW PeekNamedPipe SetEndOfFile CancelWaitableTimer CreateHardLinkA GetTickCount LoadLibraryW ReadConsoleInputA SizeofResource GetFileAttributesW FileTimeToSystemTime CreateFileW RaiseException FindFirstFileA GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress AttachConsole VirtualAlloc BeginUpdateResourceW GetTempFileNameA SetFileApisToANSI FoldStringW FoldStringA GetModuleHandleA FreeEnvironmentStringsW GetShortPathNameW SetCalendarInfoA FindFirstVolumeW LCMapStringW WideCharToMultiByte LCMapStringA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RtlUnwind HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount

user32

GetMessageExtraInfo DdeQueryStringW LoadMenuW GetKeyNameTextW CharToOemBuffW GetClassInfoExA

Sharing