jaffacakes118_c585ee0227c16c0e104f594b43c867ccb29efcf059d5c6898fbcfaf478dc0a9a[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_c585ee0227c16c0e104f594b43c867ccb29efcf059d5c6898fbcfaf478dc0a9a.bin
Size 151KB
Sample260925-yncjkaytgt
SHA256 c585ee0227c16c0e104f594b43c867ccb29efcf059d5c6898fbcfaf478dc0a9a
MD5 5dfd57dec2725081a9bc790bc67c010f
SHA1 3800ac092e418c367561882eb6d47ca09c5ea194
SHA512 a24fa2c0cb03aceed5d421f97666dc3ed625d686849cfffba6bfef6eabb615fab1a7a39c44ba301dfcc6fc2d6ce003a59d9c149e0bc8b5c738fa4c1a8ad49fa8
SSDEEP 3072:Yvs8AG2VxDbHsYXhDyFfR/obapccswOqdhQxlFpuMBX7:4oBMMh0NovcPOVlBX
TLSH
T119E33ADEB58894F0D55D143A989FBB72AF79AA05C60406F7B3ACE8B51B330127D0781E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_c585ee0227c16c0e104f594b43c867ccb29efcf059d5c6898fbcfaf478dc0a9a.bin

File Explorer

jaffacakes118_c585ee0227c16c0e104f594b43c867ccb29efcf059d5c6898fbcfaf478dc0a9a.bin

.dll 151KB

jaffacakes118_c585ee0227c16c0e104f594b43c867ccb29efcf059d5c6898fbcfaf478dc0a9a.bin

IMPHASH 308550880fd9dcc2e4877a507d06b256
SHA256 c585ee0227c16c0e104f594b43c867ccb29efcf059d5c6898fbcfaf478dc0a9a
MD5 5dfd57dec2725081a9bc790bc67c010f
SHA1 3800ac092e418c367561882eb6d47ca09c5ea194
SHA512 a24fa2c0cb03aceed5d421f97666dc3ed625d686849cfffba6bfef6eabb615fab1a7a39c44ba301dfcc6fc2d6ce003a59d9c149e0bc8b5c738fa4c1a8ad49fa8
SSDEEP 3072:Yvs8AG2VxDbHsYXhDyFfR/obapccswOqdhQxlFpuMBX7:4oBMMh0NovcPOVlBX
TLSH
T119E33ADEB58894F0D55D143A989FBB72AF79AA05C60406F7B3ACE8B51B330127D0781E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

67088

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

imm32

ImmSetOpenStatus ImmReleaseContext ImmCreateSoftKeyboard ImmShowSoftKeyboard ImmDestroySoftKeyboard ImmGetConversionStatus ImmGenerateMessage ImmSetConversionStatus ImmReSizeIMCC ImmCreateIMCC ImmDestroyIMCC ImmGetConversionListA ImmEscapeA ImmGetContext ImmSetStatusWindowPos ImmLockIMCC ImmLockIMC ImmUnlockIMCC ImmGetStatusWindowPos ImmUnlockIMC

kernel32

OpenFileMappingA GetSystemDirectoryA DuplicateHandle OpenProcess GetCurrentProcess SetEndOfFile GetModuleFileNameA GetCurrentProcessId GetProcAddress GetModuleHandleA LockResource LoadResource FindResourceA GetVersionExA FlushViewOfFile lstrcmpiA lstrlenA lstrcpyA GlobalLock lstrcatA ReadFile GlobalFree GlobalAlloc CloseHandle SetFilePointer WideCharToMultiByte MultiByteToWideChar CreateFileA UnmapViewOfFile GetFileSize lstrcmpA CreateFileMappingA GetTempFileNameA MapViewOfFile GetTempPathA WriteFile GetTickCount GetLastError GetWindowsDirectoryA GlobalUnlock

user32

SetFocus EnumChildWindows EnableWindow SendMessageA DrawTextA CheckDlgButton EndDialog GetDlgItem GetKeyboardLayoutList BeginPaint IsWindowVisible DialogBoxParamA MessageBoxA GetKeyboardState SystemParametersInfoA GetSystemMetrics RegisterClassExA GetClassInfoExA LoadImageA DestroyIcon UnregisterClassA LoadStringA GetClientRect keybd_event LoadMenuA CharLowerBuffA GetParent SetDlgItemTextA GetDlgItemTextA GetTabbedTextExtentA SendDlgItemMessageA CheckRadioButton IsCharUpperA ToAscii DestroyWindow CheckMenuItem RedrawWindow UpdateWindow InvalidateRect CopyRect WinHelpA GetKeyboardLayout GetMenu TrackPopupMenu GetSubMenu EndPaint DefWindowProcA PtInRect ReleaseCapture GetWindowLongA SetCapture IntersectRect SetWindowPos LoadBitmapA GetWindowRect GetDC GetCaretPos ReleaseDC MessageBeep SetWindowLongA ScreenToClient CreateWindowExA GetWindow PostMessageA ShowWindow CallWindowProcA ClientToScreen wsprintfA DestroyMenu SetCursor LoadCursorA GetCursorPos

gdi32

DeleteObject DeleteDC SelectObject CreateCompatibleDC GetTextExtentPointA ExtTextOutA SetBkColor SetTextColor CreateFontIndirectA GetObjectA GetCurrentObject GetStockObject GetDeviceCaps MoveToEx BitBlt CreatePen PatBlt CreateDCA LineTo

comdlg32

GetOpenFileNameA GetFileTitleA

advapi32

RegCreateKeyExA RegSetValueExA RegCreateKeyA RegQueryValueExA RegOpenKeyExA RegCloseKey

Name

.text

Size

95KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ShareDa

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sgroup

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_c585ee0227c16c0e104f594b43c867ccb29efcf059d5c6898fbcfaf478dc0a9a.bin

imm32

kernel32

user32

gdi32

comdlg32

advapi32

generic