jaffacakes118_cb177a793c83958320939701daa48a58824c1166a9ad82a210163dd8cb996b67[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_cb177a793c83958320939701daa48a58824c1166a9ad82a210163dd8cb996b67.bin
Size 1.4MB
Sample260928-e3fd8avckf
SHA256 cb177a793c83958320939701daa48a58824c1166a9ad82a210163dd8cb996b67
MD5 7ae887c2d7d7c4b24fe12751c4438a8a
SHA1 1daa69e0725345db8a5bc7db7e69a00337ede9a7
SHA512 222e74230c592694e5c07d252137b5c1c51c9816a997021fb8113090ce8e30ab24f61da2fce4557b4f751ea5bb37ad63bcd9dca814ba34eb68bae7782c8b3963
SSDEEP 24576:X/W7APovljdf31kdm74n8spGBDvYTkaw6cOiusZSS1PC4JTsKEIGF8:XIdxx74nyBDh6mSuCmTTEIn
TLSH
T123657B10EEC1C433E8B5017596FF9B656A3A91313B16C6D3A68438747A603E1B6363EF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_cb177a793c83958320939701daa48a58824c1166a9ad82a210163dd8cb996b67.bin

File Explorer

jaffacakes118_cb177a793c83958320939701daa48a58824c1166a9ad82a210163dd8cb996b67.bin

.dll 1.4MB

jaffacakes118_cb177a793c83958320939701daa48a58824c1166a9ad82a210163dd8cb996b67.bin

IMPHASH e7bee6969731edbfc0dff2a7d0691412
SHA256 cb177a793c83958320939701daa48a58824c1166a9ad82a210163dd8cb996b67
MD5 7ae887c2d7d7c4b24fe12751c4438a8a
SHA1 1daa69e0725345db8a5bc7db7e69a00337ede9a7
SHA512 222e74230c592694e5c07d252137b5c1c51c9816a997021fb8113090ce8e30ab24f61da2fce4557b4f751ea5bb37ad63bcd9dca814ba34eb68bae7782c8b3963
SSDEEP 24576:X/W7APovljdf31kdm74n8spGBDvYTkaw6cOiusZSS1PC4JTsKEIGF8:XIdxx74nyBDh6mSuCmTTEIn
TLSH
T123657B10EEC1C433E8B5017596FF9B656A3A91313B16C6D3A68438747A603E1B6363EF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1486848

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\work\VCodeServer\Release\CrackCaptchaAPI.pdb

kernel32

FreeLibrary CreateSemaphoreA ReleaseSemaphore TlsAlloc GetLocalTime TlsSetValue GetPrivateProfileStringA MoveFileA GetFileSize ReadFile TlsGetValue GetPrivateProfileIntA GetCurrentDirectoryA MulDiv GetCurrentProcess SystemTimeToFileTime ResetEvent GetCurrentThreadId WriteFile InterlockedIncrement HeapDestroy HeapCreate SetEvent CreateEventA HeapFree GetProcessHeap HeapAlloc SystemTimeToTzSpecificLocalTime SetLastError WaitForSingleObject EnterCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection GetSystemTimeAsFileTime GetTickCount FileTimeToSystemTime WideCharToMultiByte GetLastError MultiByteToWideChar InterlockedDecrement Sleep GetVersionExA DeviceIoControl CreateFileA GetProcAddress LoadLibraryA lstrlenA WaitForMultipleObjects CloseHandle DeleteFileA GlobalFree GlobalAlloc SetEnvironmentVariableA CompareStringW GetFileAttributesA CreateFileW WriteConsoleW FlushFileBuffers SetEndOfFile SetStdHandle GetDriveTypeW EncodePointer DecodePointer ExitThread CreateThread FindClose FileTimeToLocalFileTime GetDriveTypeA FindFirstFileExA GetCommandLineA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetTimeZoneInformation HeapSize GetModuleHandleW ExitProcess TlsFree GetCPInfo GetACP GetOEMCP IsValidCodePage GetStdHandle GetModuleFileNameW IsProcessorFeaturePresent GetFullPathNameA GetFileInformationByHandle PeekNamedPipe GetFileType GetCurrentDirectoryW RtlUnwind SetHandleCount GetStartupInfoW LCMapStringW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId SetFilePointer GetConsoleCP GetConsoleMode HeapReAlloc LoadLibraryW GetStringTypeW

user32

GetDC GetWindowDC ScreenToClient FindWindowExA IsWindow ReleaseDC GetSystemMetrics IsRectEmpty GetWindowRect GetSysColor DrawTextA

gdi32

RealizePalette CreateDIBSection SetBkColor SetBkMode SetTextColor GetStockObject CreateFontIndirectA GetObjectA SelectObject DeleteObject CreateCompatibleBitmap DeleteDC CreateCompatibleDC BitBlt GetDIBits SetWinMetaFileBits GetDeviceCaps DeleteEnhMetaFile GetEnhMetaFileHeader SetEnhMetaFileBits PlayEnhMetaFile SelectPalette CreatePalette GetEnhMetaFilePaletteEntries ExtTextOutA

advapi32

OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA

wininet

InternetOpenUrlA InternetReadFile InternetOpenA HttpQueryInfoA InternetCloseHandle

iphlpapi

GetAdaptersInfo

shlwapi

PathFileExistsA

ws2_32

gethostbyname gethostname WSACleanup connect send recv closesocket socket WSAGetLastError htons WSACloseEvent WSACreateEvent ioctlsocket inet_addr WSAStartup WSAResetEvent WSAWaitForMultipleEvents WSAEnumNetworkEvents ntohl htonl getsockname ntohs getpeername inet_ntoa WSAEventSelect

Name

.text

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

279KB

Virtual Size

278KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

28KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rmnet

Size

56KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_cb177a793c83958320939701daa48a58824c1166a9ad82a210163dd8cb996b67.bin

kernel32

user32

gdi32

advapi32

wininet

iphlpapi

shlwapi

ws2_32

generic