jaffacakes118_Packed[.]Win32[.]Krap[.]ar[.]5f6bd011ba406b884c310

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Packed.Win32.Krap.ar.5f6bd011ba406b884c310
Size 137KB
Sample261014-kcdqlayw8m
SHA256 aca79071e1d1b9ff27b9d5322b65b8e9f2f2481eb3370673bde11da9c0162fa9
MD5 489391ff24a5f6bd011ba406b884c310
SHA1 493c9fddef0573f289a14b71ade78c650fa22fca
SHA512 e6f92ab07d53e9c46482ed0c5226eb1acd24cf1371a49a6aa0dc9f59bb5d2a0ac3afb845a1c6d2bd7374265f436690a11fa5cca0b0e01ed8c61e374879848c41
SSDEEP 3072:aR2xn3k0CdM1vabyzJYWqQmxkAC2lqu25ltYD:aR2J0LS6VQmxV/lNm
TLSH
T182D3E104F97462D9FAAACA358054FF804E3CBC298DF3C47A745C22CEAA3AD86475571D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Packed.Win32.Krap.ar.5f6bd011ba406b884c310

File Explorer

jaffacakes118_Packed.Win32.Krap.ar.5f6bd011ba406b884c310

.exe 137KB

jaffacakes118_Packed.Win32.Krap.ar.5f6bd011ba406b884c310

IMPHASH a98bd09a1094488d54c82496de9429da
SHA256 aca79071e1d1b9ff27b9d5322b65b8e9f2f2481eb3370673bde11da9c0162fa9
MD5 489391ff24a5f6bd011ba406b884c310
SHA1 493c9fddef0573f289a14b71ade78c650fa22fca
SHA512 e6f92ab07d53e9c46482ed0c5226eb1acd24cf1371a49a6aa0dc9f59bb5d2a0ac3afb845a1c6d2bd7374265f436690a11fa5cca0b0e01ed8c61e374879848c41
SSDEEP 3072:aR2xn3k0CdM1vabyzJYWqQmxkAC2lqu25ltYD:aR2J0LS6VQmxV/lNm
TLSH
T182D3E104F97462D9FAAACA358054FF804E3CBC298DF3C47A745C22CEAA3AD86475571D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4604

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

VariantClear VariantCopyInd SysStringLen SysAllocStringLen

kernel32

LocalFree GetCommandLineW GetLogicalDriveStringsW GetWindowsDirectoryW ExpandEnvironmentStringsW OpenEventW CopyFileW GetCurrentDirectoryW GetFullPathNameW GetExitCodeProcess GetModuleFileNameW lstrlenA RaiseException CreateMutexW LoadLibraryW FindNextFileW GetVolumeInformationW HeapFree GetPrivateProfileSectionW GetPrivateProfileStringW QueryDosDeviceW GetSystemTimeAsFileTime FreeLibrary SetFilePointer GetSystemDefaultUILanguage CreateFileW FormatMessageA RegisterWowExec HeapAlloc GetProcAddress DeleteFileW GetTickCount GetStartupInfoA WideCharToMultiByte ReadFile GetCurrentThreadId CreateDirectoryW FindClose CreateProcessW GetLastError IsValidLocale LocalReAlloc lstrcmpiW MultiByteToWideChar GetTempPathW GetPrivateProfileIntW InterlockedExchange SetLastError GetDriveTypeW LoadLibraryA Sleep GetDateFormatW lstrlenW LocalAlloc UnhandledExceptionFilter GetCurrentProcess lstrcmpW InterlockedIncrement GetVersionExA OpenMutexW TerminateProcess ExitThread CloseHandle ReleaseMutex GetFileAttributesW GetDiskFreeSpaceExW GetModuleHandleA DeviceIoControl InterlockedDecrement QueryPerformanceCounter GetTimeFormatW WriteFile GetSystemDirectoryW GlobalAlloc GetCurrentProcessId GlobalFree SetUnhandledExceptionFilter GetProcessHeap SetCurrentDirectoryW WaitForSingleObject FormatMessageW FindFirstFileW

comctl32

PropertySheetA

msvcrt

difftime _ismbcprint _mbsnbset

user32

IsRectEmpty GetWindowDC SetForegroundWindow SetFocus GetWindowInfo

shlwapi

PathIsRelativeW PathIsNetworkPathA StrCmpLogicalW

shell32

ShellExecuteA SHGetPathFromIDListA SHBrowseForFolderA