jaffacakes118_3112c78ab7075943f56f1cc697ee0b0f26e1177885d30e3d4769f1568d5506a1[.]bin

resource
unpack001/Setup.exe

jaffacakes118_3112c78ab7075943f56f1cc697ee0b0f26e1177885d30e3d4769f1568d5506a1.bin

SHA256 3112c78ab7075943f56f1cc697ee0b0f26e1177885d30e3d4769f1568d5506a1
MD5 9145195967a678b865f85863a123dd4d
SHA1 ac08c5a877afeb348cb5382663b6569cb102661d
SHA512 a9779ee93648648888f9971a22baf815dfa710a0cd98acd0da489a69d2130755cdc20062604ad4d1302fb42a9539c0ee1c243ff432d9171c16ec65d717d64323
SSDEEP 24576:jbj5MYkWzFqKnFyEYZGgDK6v9BB5Qzl+pBAKGkkeivmvtDInfx2Ha4F76Odv:Pj5BH8KAEPgDKa9u4BAKtke8f0Ha4FuQ
TLSH
T19B753377B6F0F3F9C211C448A30C91B53386A0652ACDE758CE6C97130697B19AD8A7DB
MD5 SHA1 SHA512 SSDEEP TLSH

Checked by SiteAdvisor.com.txt

SHA256 c25f99955009110fd3b682939032d14e90cbc44c1a36aa81dfb3174ae87c003c
MD5 889ab46ec9a1520a3a1238e77b01c216
SHA1 77afcad966a23620d3960d654926caef3e23903b
SHA512 9a55cbfb3d3860b6073247153fe6d9ac07d11b4623bc2663047d414c89f0a0714dcb057dc8284a7233629b3df50c065dbee8e6d39784fe860f9fc51289ae0069
MD5 SHA1 SHA512

Downloaded from Torrentcafe.com.txt

SHA256 db178e1421a3008ccd5e08aa347bf0bff1ae144773bd2e0bce80f281f2f6a740
MD5 0f7d522e90014d16e95ea75a2e4cee0f
SHA1 20afd3a7e3760235faf8662cf603f58101ce3949
SHA512 537e8728baf6ff3312020b2d086090c63a5e58fd17a806178fb1f5c00b798d954d992cf4a597815467eca64ade7e2e67e938b2b83c0dfa11bd4d5f24966e2a24
MD5 SHA1 SHA512

FILE_ID.DIZ

SHA256 bfeaf9697f6d99bc9405affe74193446822cf55ba08c2276f1c2ec24e6c1c541
MD5 35cee4e5e38cb98c6d9302a2ce1622f7
SHA1 3426e87260a9c66ba3edb4f341111feca7c99a17
SHA512 b78036b0da94c4c70efff596c2ce0804be00468884a21e4e981316dc0926bdc142d3cf299d85650c21728cc3484f22801eba111740df6fef3b8c4dd95c6707f2
TLSH
T16E9002930165052D16540945044E315163AE5171E4FA00440070241454B3406085769C
MD5 SHA1 SHA512 TLSH

Setup.exe

IMPHASH 760e8a470ad50170eb9dec948038fa14
SHA256 46aecd3012f7f1cf0413372a77b49da76d4f6a91757f63831ead3506d1ce2549
MD5 6d9c968f267a94b9a9c6895ff6540cc0
SHA1 140fa522cc88e4bd3ae3867ce7ee509929867634
SHA512 ae75fca8eafccc9a201b530a21d5d75d6ed3ddcac5ab5ba8c15fb73ab5ce2b9a5c3336c17a1dc2800789ad3aac9d6d30ad1b2efab71290b634647ea7bb5b371e
SSDEEP 49152:ve75tpAKsPRgXQY9GWBSKPkeAxOH24VwoD:ve75tpAKsPRgg0zBeXsbdD
TLSH
T1AA75231BBAD0E2B1C232D0389F08A171F79158071A899E47FF5CA2530FB7715E89B799
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

36334

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

rpcrt4

tree_peek_ndr short_from_ndr_temp long_from_ndr float_from_ndr UuidHash RpcStringFreeA RpcServerUseProtseqIfA RpcNetworkInqProtseqsA RpcMgmtSetCancelTimeout RpcMgmtInqStats RpcMgmtInqIfIds RpcMgmtEpEltInqNextA RpcBindingCopy MesHandleFree CStdStubBuffer_QueryInterface

kernel32

QueryPerformanceCounter lstrcmpiA VerLanguageNameW VerLanguageNameA SetTimeZoneInformation SetLastError ReleaseMutex RegisterWaitForSingleObjectEx QueryDosDeviceW OpenFileMappingA ChangeTimerQueueTimer CreateHardLinkW DeleteFileA EnumResourceLanguagesA ExitProcess FindNextChangeNotification FlushViewOfFile FreeEnvironmentStringsA GetCommandLineA GetDevicePowerState GetEnvironmentStringsW GetFileSize GetNamedPipeHandleStateA GetPrivateProfileIntW GetProcAddress GetShortPathNameW GetTapeParameters GetTickCount HeapAlloc InterlockedExchange LoadResource

version

VerQueryValueW VerQueryValueA VerInstallFileW VerInstallFileA VerFindFileW VerFindFileA GetFileVersionInfoW GetFileVersionInfoSizeW GetFileVersionInfoA GetFileVersionInfoSizeA

crtdll

tanh _exit _finite _hypot _mktemp _popen _putenv _strupr _yn clearerr fscanf iswlower

user32

GetFocus LoadCursorA LoadImageA PostMessageA SendMessageA SetFocus UpdateWindow DestroyCaret

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock ExpandEnvironmentStringsForUserW FreeGPOListW GetAppliedGPOListW GetProfilesDirectoryW LeaveCriticalPolicySection RegisterGPNotification UnregisterGPNotification EnterCriticalPolicySection

ntdll

NtOpenMutant NtSetEaFile RtlSetSaclSecurityDescriptor NtSetHighWaitLowEventPair RtlSecondsSince1980ToTime RtlNtStatusToDosError RtlGetSaclSecurityDescriptor RtlFindNextForwardRunClear RtlFindClearBitsAndSet RtlAreBitsClear NtCreateIoCompletion

ViKiNG.nfo

SHA256 52b052045d1d282ad67b0726b5533e7f08f18be412049be1665c4fcd15c66305
MD5 dda2c6582dc71bde3d95e6db342cb14c
SHA1 d38a81ce536126546b5677b9b5e59a4e135a5f05
SHA512 653509f302df0ea453b7eb9615d107ccf0c19e17f1b8231af9c57148cd8f33ac51975544ddfd252201e2a7ff4fc720d56a85c52d90ae31a4f1a0da3edc1a5e11
TLSH
T13E5154CE6DB8A0110C3CF3761A67942CDA3B1677E0667B007CBE116ADBB1112AB2C74D
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer