jaffacakes118_Packed[.]Win32[.]Krap[.]iu[.]cff10cd8bab73765771c1750dfda66e9

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Packed.Win32.Krap.iu.cff10cd8bab73765771c1750dfda66e9
Size 46KB
Sample261012-xpc12sed64
SHA256 572135094ce73c08d44a93c46a1c1528859c6c23c75f012fdfdb5537c8ef52b4
MD5 cff10cd8bab73765771c1750dfda66e9
SHA1 2884819b7669b38ebc383862e754904c3d9d5d84
SHA512 3e982a226c41e5764fc1256abf1db1b0dc6f80878b2e743a57a0414c7b3949ff5f62ff561dab66b8addf9d123cfd0b1c3669158325b41963d3b905646b6df778
SSDEEP 192:8JTyxu5m1SiWzzS6XKF806CjirasWFP6xtL2a8oqQbnfhVti:62xd1JWzz9KG/rSyxtL2rQbnJV
TLSH
T1AD234C525AD4E8FBE093F7BF72B2430856E6966063275EDF4CAC2DA410755C060FB60E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Packed.Win32.Krap.iu.cff10cd8bab73765771c1750dfda66e9

File Explorer

jaffacakes118_Packed.Win32.Krap.iu.cff10cd8bab73765771c1750dfda66e9

.exe 46KB

jaffacakes118_Packed.Win32.Krap.iu.cff10cd8bab73765771c1750dfda66e9

IMPHASH 4217fdeabcc8c401bd6e121ccc78f3e4
SHA256 572135094ce73c08d44a93c46a1c1528859c6c23c75f012fdfdb5537c8ef52b4
MD5 cff10cd8bab73765771c1750dfda66e9
SHA1 2884819b7669b38ebc383862e754904c3d9d5d84
SHA512 3e982a226c41e5764fc1256abf1db1b0dc6f80878b2e743a57a0414c7b3949ff5f62ff561dab66b8addf9d123cfd0b1c3669158325b41963d3b905646b6df778
SSDEEP 192:8JTyxu5m1SiWzzS6XKF806CjirasWFP6xtL2a8oqQbnfhVti:62xd1JWzz9KG/rSyxtL2rQbnJV
TLSH
T1AD234C525AD4E8FBE093F7BF72B2430856E6966063275EDF4CAC2DA410755C060FB60E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6912

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoW GetProcessHeap LoadLibraryA GetProcAddress GetModuleHandleA InterlockedDecrement LocalFree InterlockedIncrement GetVersionExW UnhandledExceptionFilter

user32

CharLowerBuffW CharLowerBuffA CharLowerA ChangeMenuW ChangeMenuA ChangeDisplaySettingsW ChangeDisplaySettingsExW ChangeDisplaySettingsExA ChangeDisplaySettingsA ChangeClipboardChain CopyAcceleratorTableW CopyAcceleratorTableA CharLowerW CloseWindow CopyImage CopyIcon EnableMenuItem GetMenuState IsClipboardFormatAvailable CheckMenuItem CharNextW SendMessageW MoveWindow GetSystemMetrics FindWindowW SetForegroundWindow SetCursor SetWindowPos GetWindowTextW CreateDialogParamW DialogBoxParamW EnableWindow GetWindowTextLengthW SetScrollPos CharNextA CharNextExA CharPrevA CharPrevExA CharPrevW CharToOemA CharToOemBuffA CharToOemBuffW CharToOemW CharUpperA CharUpperBuffA CharUpperBuffW CharUpperW CheckDlgButton CheckMenuRadioItem CheckRadioButton ChildWindowFromPoint ChildWindowFromPointEx ClientToScreen ClipCursor CloseClipboard CloseWindowStation

gdi32

StartDocW SetAbortProc GetTextMetricsW SetBkMode StartPage SetWindowExtEx SetViewportExtEx SetMapMode CreateFontIndirectW LPtoDP AbortDoc EndDoc DeleteDC TextOutW GetTextExtentPoint32W CreateDCW SelectObject GetTextFaceW EndPage

advapi32

RegOpenKeyA

msi

ord55

Name

.text

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

584B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

data1

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

data2

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

data3

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

datae

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

752B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

752B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_Packed.Win32.Krap.iu.cff10cd8bab73765771c1750dfda66e9

kernel32

user32

gdi32

advapi32

msi

generic