jaffacakes118_not-a-virus[.]Downloader[.]Win32[.]Hafen[.]a[.]ca87c03ba54b97dfb7b14e51d0fb431b

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.Downloader.Win32.Hafen.a.ca87c03ba54b97dfb7b14e51d0fb431b
Size 375KB
Sample261014-eec9ysx1cv
SHA256 1b6380631d1bb1a818c98db1bc90199606d8f48da3e87762c43126e5b59425dd
MD5 ca87c03ba54b97dfb7b14e51d0fb431b
SHA1 52d5844383d5cb57db34c2bf8b3adcadbf86b39c
SHA512 2ed6cf515066e1c96869f6841070de5e1397a7a605b8c2c5d5ad4bc72611106b6d640ac88cd5a2497cb563de3eaaf1860f47c98a51c82f50421c08f8c140f0de
SSDEEP 6144:W/AFZ8+aHtd+96dtVzuZfPrrBkNp7ui2u5FLwkQld1aas4mrZWeObFsas23WrbY9:W/qod+YDluRjopCvirUDePfUWrbs7
TLSH
T1BD84022673E48487D599AA329D01D7B75278EC00A3A5210237E8BFBF7D36351E62907F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

installer

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.Downloader.Win32.Hafen.a.ca87c03ba54b97dfb7b14e51d0fb431b

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_2

File Explorer

jaffacakes118_not-a-virus.Downloader.Win32.Hafen.a.ca87c03ba54b97dfb7b14e51d0fb431b

.exe 375KB

jaffacakes118_not-a-virus.Downloader.Win32.Hafen.a.ca87c03ba54b97dfb7b14e51d0fb431b

IMPHASH 470282e4fe2ebbf8acb122584604aac8
SHA256 1b6380631d1bb1a818c98db1bc90199606d8f48da3e87762c43126e5b59425dd
MD5 ca87c03ba54b97dfb7b14e51d0fb431b
SHA1 52d5844383d5cb57db34c2bf8b3adcadbf86b39c
SHA512 2ed6cf515066e1c96869f6841070de5e1397a7a605b8c2c5d5ad4bc72611106b6d640ac88cd5a2497cb563de3eaaf1860f47c98a51c82f50421c08f8c140f0de
SSDEEP 6144:W/AFZ8+aHtd+96dtVzuZfPrrBkNp7ui2u5FLwkQld1aas4mrZWeObFsas23WrbY9:W/qod+YDluRjopCvirUDePfUWrbs7
TLSH
T1BD84022673E48487D599AA329D01D7B75278EC00A3A5210237E8BFBF7D36351E62907F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

13085

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA SetWindowPos IsWindowEnabled SetClassLongA GetSystemMenu EnableMenuItem EndDialog GetSystemMetrics CreatePopupMenu AppendMenuA GetWindowRect SetDlgItemTextA OpenClipboard EmptyClipboard SetClipboardData CloseClipboard LoadBitmapA IsWindowVisible CallWindowProcA GetMessagePos ScreenToClient CheckDlgButton LoadCursorA SetCursor GetWindowLongA GetSysColor CharNextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA TrackPopupMenu ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint

kernel32

RemoveDirectoryA GetSystemDirectoryA lstrcatA GetTempFileNameA CreateFileA CreateProcessA CreateDirectoryA GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceA lstrcpynA SetErrorMode GetVersion lstrlenA GetCommandLineA GetTempPathA GetWindowsDirectoryA ExitProcess CopyFileA GetCurrentProcess GetModuleFileNameA GetFileSize GetTickCount Sleep SetFileAttributesA GetFileAttributesA SetCurrentDirectoryA MoveFileA GetFullPathNameA GetShortPathNameA SearchPathA CompareFileTime SetFileTime CloseHandle lstrcmpiA MulDiv DeleteFileA FindFirstFileA FindNextFileA FindClose SetFilePointer ReadFile WriteFile GetPrivateProfileStringA WritePrivateProfileStringA MultiByteToWideChar FreeLibrary GetProcAddress LoadLibraryExA GetModuleHandleA GlobalFree GetExitCodeProcess WaitForSingleObject GlobalAlloc ExpandEnvironmentStringsA lstrcmpA

shell32

SHGetSpecialFolderLocation SHBrowseForFolderA SHGetPathFromIDListA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegDeleteKeyA RegCloseKey RegEnumKeyA RegOpenKeyExA RegEnumValueA RegQueryValueExA RegSetValueExA RegCreateKeyExA RegDeleteValueA SetFileSecurityA

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

gdi32

SelectObject SetTextColor SetBkMode CreateFontIndirectA CreateBrushIndirect DeleteObject GetDeviceCaps SetBkColor

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

ntdll

_allshl _aulldiv _allmul _alldiv _allrem _allshr