jaffacakes118_not-a-virus[.]Downloader[.]Win32[.]Hafen[.]a[.]fa497f16cc42d88d44d25a5a2fc688f1

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.Downloader.Win32.Hafen.a.fa497f16cc42d88d44d25a5a2fc688f1
Size 615KB
Sample261014-eelakax1cy
SHA256 84a114d6ad78a8414d9efda8356e77cdfe0fbf1547914a76eb6304921a633918
MD5 fa497f16cc42d88d44d25a5a2fc688f1
SHA1 99ef3d1b7dee5dbf44d028a26f60f92fac8905cd
SHA512 3c906608bf757b799a03a03c3c91b6fe0b1e1ae8859597a53e5543f9cd73bf9fa6304e08113ee5f319d007a5d55c57b84c767bb9db8870de2b61525e1ad6e8cf
SSDEEP 12288:W/qod+YDluRjopCvirUDePfUWrbsaESUQb/zolwPoc1HvAQ7a:W/Ld+YDiocvirUD8fZrbdqQ4kocpq
TLSH
T18DD4121667B08457D1ADAE72AD44C6B65274FC00A3E4260637C8BFBFBD36345A5280BF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

installer

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.Downloader.Win32.Hafen.a.fa497f16cc42d88d44d25a5a2fc688f1

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_2

File Explorer

jaffacakes118_not-a-virus.Downloader.Win32.Hafen.a.fa497f16cc42d88d44d25a5a2fc688f1

.exe 615KB

jaffacakes118_not-a-virus.Downloader.Win32.Hafen.a.fa497f16cc42d88d44d25a5a2fc688f1

IMPHASH 470282e4fe2ebbf8acb122584604aac8
SHA256 84a114d6ad78a8414d9efda8356e77cdfe0fbf1547914a76eb6304921a633918
MD5 fa497f16cc42d88d44d25a5a2fc688f1
SHA1 99ef3d1b7dee5dbf44d028a26f60f92fac8905cd
SHA512 3c906608bf757b799a03a03c3c91b6fe0b1e1ae8859597a53e5543f9cd73bf9fa6304e08113ee5f319d007a5d55c57b84c767bb9db8870de2b61525e1ad6e8cf
SSDEEP 12288:W/qod+YDluRjopCvirUDePfUWrbsaESUQb/zolwPoc1HvAQ7a:W/Ld+YDiocvirUD8fZrbdqQ4kocpq
TLSH
T18DD4121667B08457D1ADAE72AD44C6B65274FC00A3E4260637C8BFBFBD36345A5280BF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

13085

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA SetWindowPos IsWindowEnabled SetClassLongA GetSystemMenu EnableMenuItem EndDialog GetSystemMetrics CreatePopupMenu AppendMenuA GetWindowRect SetDlgItemTextA OpenClipboard EmptyClipboard SetClipboardData CloseClipboard LoadBitmapA IsWindowVisible CallWindowProcA GetMessagePos ScreenToClient CheckDlgButton LoadCursorA SetCursor GetWindowLongA GetSysColor CharNextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA TrackPopupMenu ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint

kernel32

RemoveDirectoryA GetSystemDirectoryA lstrcatA GetTempFileNameA CreateFileA CreateProcessA CreateDirectoryA GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceA lstrcpynA SetErrorMode GetVersion lstrlenA GetCommandLineA GetTempPathA GetWindowsDirectoryA ExitProcess CopyFileA GetCurrentProcess GetModuleFileNameA GetFileSize GetTickCount Sleep SetFileAttributesA GetFileAttributesA SetCurrentDirectoryA MoveFileA GetFullPathNameA GetShortPathNameA SearchPathA CompareFileTime SetFileTime CloseHandle lstrcmpiA MulDiv DeleteFileA FindFirstFileA FindNextFileA FindClose SetFilePointer ReadFile WriteFile GetPrivateProfileStringA WritePrivateProfileStringA MultiByteToWideChar FreeLibrary GetProcAddress LoadLibraryExA GetModuleHandleA GlobalFree GetExitCodeProcess WaitForSingleObject GlobalAlloc ExpandEnvironmentStringsA lstrcmpA

shell32

SHGetSpecialFolderLocation SHBrowseForFolderA SHGetPathFromIDListA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegDeleteKeyA RegCloseKey RegEnumKeyA RegOpenKeyExA RegEnumValueA RegQueryValueExA RegSetValueExA RegCreateKeyExA RegDeleteValueA SetFileSecurityA

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

gdi32

SelectObject SetTextColor SetBkMode CreateFontIndirectA CreateBrushIndirect DeleteObject GetDeviceCaps SetBkColor

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

ntdll

_allshl _aulldiv _allmul _alldiv _allrem _allshr