jaffacakes118_Packed[.]Win32[.]Krap[.]ae[.]2d382ea30852e2bbe2c5b3f320f39a0e

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Packed.Win32.Krap.ae.2d382ea30852e2bbe2c5b3f320f39a0e
Size 132KB
Sample261014-kblptaas61
SHA256 4f617f42e41c294cb2bbd9333ff9f0b2d330b0ebdd1026c475cae5a61a60972a
MD5 2d382ea30852e2bbe2c5b3f320f39a0e
SHA1 c51348544f84e8542c35579cb3ce7ac97830b0b0
SHA512 73e8343187deff58ce77f36796e0e1e95aa65d51d5124c58b1e5d51a60b7e700f9d5b821c71b5db855722f17f69f638fc824be2304db294be025c9e7f1d50fb7
SSDEEP 1536:wG2VMo9tZVuECqJUFHvMlNmXFNf4UNIW0X6eMydZWkNoiF0ir3nGzvycQ:0n9tzbGUlAnvbw6eZd7kirq
TLSH
T195D3F1255FFC140FD75166B31144470E7341DE3B42F4023E77EA364A2A3A7AA547CEAA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Packed.Win32.Krap.ae.2d382ea30852e2bbe2c5b3f320f39a0e

File Explorer

jaffacakes118_Packed.Win32.Krap.ae.2d382ea30852e2bbe2c5b3f320f39a0e

.exe 132KB

jaffacakes118_Packed.Win32.Krap.ae.2d382ea30852e2bbe2c5b3f320f39a0e

IMPHASH 11522a2c18fef2d320c7906e93247256
SHA256 4f617f42e41c294cb2bbd9333ff9f0b2d330b0ebdd1026c475cae5a61a60972a
MD5 2d382ea30852e2bbe2c5b3f320f39a0e
SHA1 c51348544f84e8542c35579cb3ce7ac97830b0b0
SHA512 73e8343187deff58ce77f36796e0e1e95aa65d51d5124c58b1e5d51a60b7e700f9d5b821c71b5db855722f17f69f638fc824be2304db294be025c9e7f1d50fb7
SSDEEP 1536:wG2VMo9tZVuECqJUFHvMlNmXFNf4UNIW0X6eMydZWkNoiF0ir3nGzvycQ:0n9tzbGUlAnvbw6eZd7kirq
TLSH
T195D3F1255FFC140FD75166B31144470E7341DE3B42F4023E77EA364A2A3A7AA547CEAA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

67140

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.init

Size

88KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

8KB

Virtual Size

4.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

4KB

Virtual Size

60B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_Packed.Win32.Krap.ae.2d382ea30852e2bbe2c5b3f320f39a0e

kernel32

generic