jaffacakes118_Packed[.]Win32[.]Katusha[.]o[.]46be2090968a5b2a0207917f49ef5904

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Packed.Win32.Katusha.o.46be2090968a5b2a0207917f49ef5904
Size 124KB
Sample261012-xfb3dsv16k
SHA256 f3aa264c055cd120f8d3d59c05b4141ccd28033fd72ac277f2840cb5ec129cf9
MD5 46be2090968a5b2a0207917f49ef5904
SHA1 f236d5d53553e77e60da51831ff638ba8511f8a2
SHA512 9f93e739fe1800570f4e0d6dee4489be4c1c366df5db3b0fe8b091801e53001dd57a19b4e733f7c10fcc297119ade54c0254af7fa026abeb82905e3e954b177a
SSDEEP 3072:O12zwDl5oRa4QyBAC11tjOJpTP3cNOjtQxted:FggSyB/rtqJpT3cNF
TLSH
T164C38D23B4C1D072E02504B58892CA72A96BF8749F712DC77BC4566E6F762D3DE3830A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Packed.Win32.Katusha.o.46be2090968a5b2a0207917f49ef5904

File Explorer

jaffacakes118_Packed.Win32.Katusha.o.46be2090968a5b2a0207917f49ef5904

.exe 124KB

jaffacakes118_Packed.Win32.Katusha.o.46be2090968a5b2a0207917f49ef5904

IMPHASH c98d864f18a199402132e0a3741f36a6
SHA256 f3aa264c055cd120f8d3d59c05b4141ccd28033fd72ac277f2840cb5ec129cf9
MD5 46be2090968a5b2a0207917f49ef5904
SHA1 f236d5d53553e77e60da51831ff638ba8511f8a2
SHA512 9f93e739fe1800570f4e0d6dee4489be4c1c366df5db3b0fe8b091801e53001dd57a19b4e733f7c10fcc297119ade54c0254af7fa026abeb82905e3e954b177a
SSDEEP 3072:O12zwDl5oRa4QyBAC11tjOJpTP3cNOjtQxted:FggSyB/rtqJpT3cNF
TLSH
T164C38D23B4C1D072E02504B58892CA72A96BF8749F712DC77BC4566E6F762D3DE3830A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

79273

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MultiByteToWideChar lstrlenW FlushInstructionCache RaiseException GetStringTypeExA GetShortPathNameA SetThreadLocale FindFirstFileA GetLastError SetLastError lstrcmpiA GetThreadLocale GetProcAddress EnterCriticalSection GetTempFileNameA FindClose LoadLibraryA LockResource CreateEventW GetModuleFileNameA FindNextFileA GetModuleHandleA LoadLibraryExA VirtualProtect OpenEventW DeleteCriticalSection GetCurrentThreadId GetVersionExA CloseHandle GetTempPathA GetSystemTime DeleteFileA GetLocaleInfoA GetEnvironmentVariableA GetStringTypeA LCMapStringW LCMapStringA InitializeCriticalSectionAndSpinCount RtlUnwind GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA HeapSize IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess TlsFree TlsSetValue TlsAlloc TlsGetValue IsValidCodePage GetOEMCP GetACP GetCPInfo GetStdHandle ExitProcess GetSystemDirectoryA ReadFile IsDBCSLeadByte GetExitCodeProcess GetFileAttributesA LeaveCriticalSection SizeofResource GetVolumeInformationA WideCharToMultiByte FindResourceExA InitializeCriticalSection WriteFile GetWindowsDirectoryA GetTickCount SetEvent WaitForSingleObject GetUserDefaultLCID GetCurrentProcess InterlockedDecrement InterlockedIncrement LoadResource FreeLibrary lstrlenA FreeResource lstrcmpA FindResourceA GetFileSize CreateFileA Sleep HeapReAlloc HeapCreate GetStartupInfoA GetCommandLineA VirtualQuery GetSystemInfo GetModuleHandleW VirtualAlloc VirtualFree IsProcessorFeaturePresent GetComputerNameA GetStringTypeW HeapAlloc GetProcessHeap HeapFree InterlockedCompareExchange

user32

DialogBoxParamA SetDlgItemTextA EnableWindow UpdateWindow MapWindowPoints LoadImageA SetWindowTextA GetWindow CallWindowProcA GetWindowTextA ClientToScreen SetCursor GetMessageA SetTimer ScreenToClient GetWindowRect LoadStringA GetParent CharNextA GetClientRect GetWindowTextLengthA SendMessageA UnregisterClassA SetWindowLongA MessageBoxA InvalidateRect CharLowerA GetWindowLongA GetDlgItem EndDialog DefWindowProcA RedrawWindow GetSysColor SetWindowPos LoadStringW CheckDlgButton IsDlgButtonChecked GetActiveWindow PostMessageA wvsprintfA SystemParametersInfoA GetSystemMetrics

gdi32

SetTextColor CreateFontIndirectA DeleteObject GetObjectA GetStockObject CreateSolidBrush

advapi32

RegCreateKeyExA CloseServiceHandle CreateWellKnownSid RegCloseKey GetUserNameA OpenSCManagerA RegDeleteValueA LsaClose RegQueryInfoKeyA RegOpenKeyExA OpenServiceA ChangeServiceConfigA RegEnumKeyExA RegDeleteKeyA LsaAddAccountRights RegQueryValueExA RegSetValueExA GetTokenInformation LsaOpenPolicy OpenProcessToken

shell32

ShellExecuteExA ShellExecuteA

ole32

StringFromGUID2 CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoInitialize CoCreateInstance

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

wininet

InternetCanonicalizeUrlA InternetCrackUrlA