jaffacakes118_Virus[.]Win32[.]Nimnul[.]a[.]0ba9a4b11cf64d019ddb0

General

Target
jaffacakes118_Virus.Win32.Nimnul.a.0ba9a4b11cf64d019ddb0
Size 132KB
Sample261014-ph62jscy51
SHA256 b0cba1a43ee855800a6fc5e2575f0516d2f8fec217e6aa9c65f08f6d32da160c
MD5 176ac095bb30ba9a4b11cf64d019ddb0
SHA1 ffff8ee3959bb09865323156e6d7f6e12e932ac0
SHA512 5ee22a2219eeb00560067b710b6cf4e99762731dd404a44ce735a8d8efed19d326966f2a4e4a6acaeab314079da8a70e71590354f7d7aab034caed13670212d9
SSDEEP 3072:kDTJKt+Lfw9gAduWUYwk49JCP+H4m92KrePNxkircrC:kDTJK4LfwqYKjec4m92K6Fqirce
TLSH
T14AD3585E67473CB9F06285F1A2D22DDA0FBB5F821DA78A17AEA03F1E2C31855319350D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.Nimnul.a.0ba9a4b11cf64d019ddb0

File Explorer

jaffacakes118_Virus.Win32.Nimnul.a.0ba9a4b11cf64d019ddb0

.exe 132KB

jaffacakes118_Virus.Win32.Nimnul.a.0ba9a4b11cf64d019ddb0

IMPHASH b7c05e1343660466463d9571caa083ad
SHA256 b0cba1a43ee855800a6fc5e2575f0516d2f8fec217e6aa9c65f08f6d32da160c
MD5 176ac095bb30ba9a4b11cf64d019ddb0
SHA1 ffff8ee3959bb09865323156e6d7f6e12e932ac0
SHA512 5ee22a2219eeb00560067b710b6cf4e99762731dd404a44ce735a8d8efed19d326966f2a4e4a6acaeab314079da8a70e71590354f7d7aab034caed13670212d9
SSDEEP 3072:kDTJKt+Lfw9gAduWUYwk49JCP+H4m92KrePNxkircrC:kDTJK4LfwqYKjec4m92K6Fqirce
TLSH
T14AD3585E67473CB9F06285F1A2D22DDA0FBB5F821DA78A17AEA03F1E2C31855319350D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

36864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess HeapAlloc GetModuleFileNameA GetStartupInfoA lstrcpyA HeapDestroy lstrcatA GetModuleHandleA LeaveCriticalSection DebugBreak EnterCriticalSection WideCharToMultiByte MultiByteToWideChar FindResourceA LoadLibraryExA SizeofResource LoadResource GetLastError lstrlenA FreeLibrary lstrcpynA HeapCreate LoadLibraryA GetFileAttributesA InterlockedDecrement lstrlenW InterlockedIncrement GetProcAddress InitializeCriticalSection GetCurrentThreadId DeleteCriticalSection GetCommandLineA CreateEventA lstrcmpiA Sleep CloseHandle CreateThread WaitForSingleObject HeapReAlloc HeapFree SetEvent GetStringTypeW GetStringTypeA LCMapStringA LCMapStringW

user32

IsWindow GetMessageA TranslateMessage DispatchMessageA CharNextA PostThreadMessageA

advapi32

RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegQueryValueExA RegEnumValueA RegDeleteValueA RegCloseKey RegQueryInfoKeyA RegEnumKeyExA RegDeleteKeyA

ole32

CoRegisterClassObject CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoCreateInstance CoInitialize CoUninitialize CoRevokeClassObject

oleaut32

RegisterTypeLi LoadRegTypeLi LoadTypeLi VarI4FromStr UnRegisterTypeLi

Sharing