jaffacakes118_UDS[.]DangerousObject[.]Multi[.]Generic[.]6f1f391d9c621ba4c01bfcb9563e0401

General

Target
jaffacakes118_UDS.DangerousObject.Multi.Generic.6f1f391d9c621ba4c01bfcb9563e0401
Size 1.3MB
Sample261014-ntcreatzbz
SHA256 1799389b7c45a2b27bfa9c67bfdb8a460e9dd4c135f6e60d3e9f7e8e228dad32
MD5 6f1f391d9c621ba4c01bfcb9563e0401
SHA1 3d501e641bc6b638a77a1d3ac92ba9424f0b92c6
SHA512 8f9d461518f6f13b8362515f60bf70fd1c527d1fcffd4b5053433f5ad36d44c0c756588337f957cc60b67eb46c9a7444026ba84c900bc38e404916bea2992edd
SSDEEP 24576:hcYvfUtFbY3CAvmUBeW1AZRPJuKi/ZwRVoeJ+j9d:hDvESsUQIZwUg+Z
TLSH
T10355125E4AB14E03F1E24CB85DBA1E9DD1A82F775B3918BF502076443C782EBE97D00A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_UDS.DangerousObject.Multi.Generic.6f1f391d9c621ba4c01bfcb9563e0401

File Explorer

jaffacakes118_UDS.DangerousObject.Multi.Generic.6f1f391d9c621ba4c01bfcb9563e0401

.exe 1.3MB

jaffacakes118_UDS.DangerousObject.Multi.Generic.6f1f391d9c621ba4c01bfcb9563e0401

SHA256 1799389b7c45a2b27bfa9c67bfdb8a460e9dd4c135f6e60d3e9f7e8e228dad32
MD5 6f1f391d9c621ba4c01bfcb9563e0401
SHA1 3d501e641bc6b638a77a1d3ac92ba9424f0b92c6
SHA512 8f9d461518f6f13b8362515f60bf70fd1c527d1fcffd4b5053433f5ad36d44c0c756588337f957cc60b67eb46c9a7444026ba84c900bc38e404916bea2992edd
SSDEEP 24576:hcYvfUtFbY3CAvmUBeW1AZRPJuKi/ZwRVoeJ+j9d:hDvESsUQIZwUg+Z
TLSH
T10355125E4AB14E03F1E24CB85DBA1E9DD1A82F775B3918BF502076443C782EBE97D00A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

2140144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

generic

count=5, id=12, version=7291,

count=9, id=11, version=8047,

count=6, id=10, version=8047,

count=49, id=14, version=7299,

count=11, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=1, id=28, version=9178,

count=117, id=29, version=9178,

count=9, id=95, version=2067,

count=38, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=826, id=1, productName=Unmarked objects,

count=3, id=93, version=2179,

count=7, id=18, version=8444,

count=222, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=136, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=82, id=11, productName=VS98 (6.0) build 8168, version=8168,

count=1, productName=Unmarked objects (old),

count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,

Sharing