jaffacakes118_UDS[.]DangerousObject[.]Multi[.]Generic[.]87f51724274ce4cbacb03786ae4cdaf1

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_UDS.DangerousObject.Multi.Generic.87f51724274ce4cbacb03786ae4cdaf1
Size 818KB
Sample261014-nxfbpsct2j
SHA256 8df44cb1c96489927156fda7e7d3916ebb2e8f0ef3a62a4db69cd00a0637c6fc
MD5 87f51724274ce4cbacb03786ae4cdaf1
SHA1 6614216217ce9b490c33a8c2905d2f388c022742
SHA512 eea83701bd9cd097efa6983cdc9b0de54b11e25222a8d4e25914ff86db6113b5b7adc14883773f7e06419cd2c4992e387995f6208e844747ee181f253b1d4864
SSDEEP 24576:4FwefSPBAuxlVtD11e6CWARy/fqwNF72GAoe:CwefSPBLp11CPE/SwNF7coe
TLSH
T10B05BF80B5B1D27EC01D04309666EEF1E5F7AAF457144803B3E3BB4B187229B557BA2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_UDS.DangerousObject.Multi.Generic.87f51724274ce4cbacb03786ae4cdaf1

File Explorer

jaffacakes118_UDS.DangerousObject.Multi.Generic.87f51724274ce4cbacb03786ae4cdaf1

.exe 818KB

jaffacakes118_UDS.DangerousObject.Multi.Generic.87f51724274ce4cbacb03786ae4cdaf1

IMPHASH c2ce769cea865ed2e612cd8f880e6bdd
SHA256 8df44cb1c96489927156fda7e7d3916ebb2e8f0ef3a62a4db69cd00a0637c6fc
MD5 87f51724274ce4cbacb03786ae4cdaf1
SHA1 6614216217ce9b490c33a8c2905d2f388c022742
SHA512 eea83701bd9cd097efa6983cdc9b0de54b11e25222a8d4e25914ff86db6113b5b7adc14883773f7e06419cd2c4992e387995f6208e844747ee181f253b1d4864
SSDEEP 24576:4FwefSPBAuxlVtD11e6CWARy/fqwNF72GAoe:CwefSPBLp11CPE/SwNF7coe
TLSH
T10B05BF80B5B1D27EC01D04309666EEF1E5F7AAF457144803B3E3BB4B187229B557BA2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

250495

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

InternetGetConnectedState InternetCloseHandle HttpSendRequestA HttpOpenRequestA InternetAttemptConnect InternetConnectA InternetOpenA

urlmon

URLDownloadToFileA

winmm

timeGetTime

kernel32

LoadLibraryA InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale GetVersionExA MultiByteToWideChar WideCharToMultiByte RaiseException GetLastError InitializeCriticalSection DeleteCriticalSection lstrcmpiA lstrlenW lstrlenA CompareStringA CompareStringW EnterCriticalSection LeaveCriticalSection HeapFree GetProcessHeap GetModuleFileNameA WriteProcessMemory VirtualProtectEx ReadProcessMemory OpenProcess GetCurrentProcessId GetVolumeInformationA ReadFile GetFileSize CreateThread GetCurrentThreadId TerminateProcess GetExitCodeProcess SuspendThread ResumeThread CreateProcessA SetCurrentDirectoryA ExitProcess CopyFileA MulDiv HeapAlloc FlushInstructionCache GetCurrentProcess GlobalUnlock GlobalLock GlobalAlloc lstrcmpA GetModuleHandleA SizeofResource LoadResource FindResourceA LoadLibraryExA lstrcpynA IsDBCSLeadByte CreateDirectoryA GetTempPathA GetProcAddress SetFilePointer SetFileAttributesA SetFileTime SystemTimeToFileTime FindClose FindFirstFileA SetEndOfFile GetTickCount WaitForSingleObject SetEvent CreateEventA GetFullPathNameA RemoveDirectoryA FindNextFileA GlobalMemoryStatus SetPriorityClass GetPriorityClass GetComputerNameA GetSystemInfo GetFileAttributesA LocalFileTimeToFileTime DosDateTimeToFileTime GetFileTime SetUnhandledExceptionFilter TlsGetValue TlsSetValue TlsFree SetLastError TlsAlloc QueryPerformanceCounter GetCommandLineA GetStartupInfoA GetDateFormatA GetTimeFormatA HeapReAlloc VirtualQuery VirtualAlloc VirtualProtect RtlUnwind GetSystemTimeAsFileTime HeapSize HeapDestroy HeapCreate VirtualFree IsBadWritePtr LCMapStringA LCMapStringW GetTimeZoneInformation GetOEMCP GetCPInfo GetStringTypeA GetStringTypeW GetStdHandle UnhandledExceptionFilter FreeLibrary CreateFileA Sleep DeleteFileA CloseHandle InterlockedDecrement InterlockedIncrement FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetUserDefaultLCID FreeEnvironmentStringsA GetEnvironmentStrings EnumSystemLocalesA IsValidLocale IsValidCodePage IsBadReadPtr IsBadCodePtr SetStdHandle FlushFileBuffers GetLocaleInfoW WriteFile SetEnvironmentVariableA

user32

SetWindowPos DestroyWindow RedrawWindow IsWindow SendMessageA DestroyAcceleratorTable GetFocus IsChild GetWindow GetClassNameA BeginPaint EndPaint CallWindowProcA GetDesktopWindow InvalidateRgn GetClientRect SetCapture ReleaseCapture GetParent CharNextA CreateAcceleratorTableA LoadCursorA CreateWindowExA SetFocus GetSysColor GetDlgItem MoveWindow GetKeyState DefWindowProcA SetTimer KillTimer WaitForInputIdle EnumThreadWindows SetWindowTextA UpdateWindow GetForegroundWindow GetWindowThreadProcessId AttachThreadInput SystemParametersInfoA PostMessageA PeekMessageA GetMessageA TranslateMessage DispatchMessageA RegisterWindowMessageA GetWindowTextLengthA GetWindowTextA RegisterClassExA FillRect GetClassInfoExA SetForegroundWindow InvalidateRect GetWindowRect GetDC ReleaseDC GetWindowPlacement IsWindowVisible SetWindowPlacement MessageBoxA GetWindowLongA SetWindowLongA UnregisterClassA ShowWindow wsprintfA GetSystemMetrics

gdi32

CreateSolidBrush GetStockObject GetObjectA BitBlt CreateCompatibleDC CreateCompatibleBitmap DeleteDC SelectObject GetDeviceCaps DeleteObject

comdlg32

GetOpenFileNameA

advapi32

RegCloseKey RegEnumKeyExA RegDeleteValueA RegCreateKeyExA RegEnumKeyA RegOpenKeyExA RegQueryInfoKeyA RegQueryValueExA RegCreateKeyA RegSetValueExA RegDeleteKeyA

shell32

SHGetSpecialFolderPathA ExtractIconExA SHFileOperationA ShellExecuteA

ole32

CoCreateInstance OleInitialize StringFromGUID2 OleUninitialize CoTaskMemAlloc OleLockRunning CreateStreamOnHGlobal CoGetClassObject CLSIDFromProgID CLSIDFromString CoTaskMemFree CoTaskMemRealloc

oleaut32

LoadTypeLi LoadRegTypeLi VariantInit VariantClear OleCreateFontIndirect SysStringByteLen SysStringLen SysAllocString SysAllocStringLen SysFreeString VarUI4FromStr