jaffacakes118_Packed[.]Win32[.]Krap[.]jc[.]2131da174e650922f9ca39540566b92b

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Packed.Win32.Krap.jc.2131da174e650922f9ca39540566b92b
Size 834KB
Sample261012-xppd3sws8q
SHA256 35e03dac32d800032be59fe30f60bad4db3e25d103490f6d96ab213abce9a896
MD5 2131da174e650922f9ca39540566b92b
SHA1 fd6c9c60d326dbaa11b623574623569f9605ba42
SHA512 dc9ea072d719ed366b0664941fa60ccb0177ebd46b19d2bd9d6b2e2edd8fabcc8848ffaf11b260f374f09ea199ca96c9c3e57b1225b229d7ffa7dbcd28a6c472
SSDEEP 6144:1qGa3MuRIin1rcl0oG/WVEPFhoKrfo2s+xzoCXVKdwhtjeBYUPIG4jdZw7qGI2J1:1Da3AShoWxzXIdwh9Jwl9eDheU+
TLSH
T18E0549D250907BAEC1302F71BDDA9F5232F8B95443EB57DB4B3670A68D4FAE29E84404
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Packed.Win32.Krap.jc.2131da174e650922f9ca39540566b92b

File Explorer

jaffacakes118_Packed.Win32.Krap.jc.2131da174e650922f9ca39540566b92b

.exe 834KB

jaffacakes118_Packed.Win32.Krap.jc.2131da174e650922f9ca39540566b92b

IMPHASH dbf687d6aa2a6cafe4349f7b0821a792
SHA256 35e03dac32d800032be59fe30f60bad4db3e25d103490f6d96ab213abce9a896
MD5 2131da174e650922f9ca39540566b92b
SHA1 fd6c9c60d326dbaa11b623574623569f9605ba42
SHA512 dc9ea072d719ed366b0664941fa60ccb0177ebd46b19d2bd9d6b2e2edd8fabcc8848ffaf11b260f374f09ea199ca96c9c3e57b1225b229d7ffa7dbcd28a6c472
SSDEEP 6144:1qGa3MuRIin1rcl0oG/WVEPFhoKrfo2s+xzoCXVKdwhtjeBYUPIG4jdZw7qGI2J1:1Da3AShoWxzXIdwh9Jwl9eDheU+
TLSH
T18E0549D250907BAEC1302F71BDDA9F5232F8B95443EB57DB4B3670A68D4FAE29E84404
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4672

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

240KB

Virtual Size

239KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

1024B

Virtual Size

608B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.NewSec

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

jaffacakes118_Packed.Win32.Krap.jc.2131da174e650922f9ca39540566b92b

kernel32

msvcrt

shell32

generic