jaffacakes118_Virus[.]Win32[.]Nimnul[.]a[.]89891611e650cb8ae7fa0

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Virus.Win32.Nimnul.a.89891611e650cb8ae7fa0
Size 1.2MB
Sample261014-plergacy6p
SHA256 b292fc0ce76fb178b60300635466849a743ad1d86eb79a0a970f494052731592
MD5 a85317fb9e189891611e650cb8ae7fa0
SHA1 94667bd457c4daed0da7689aaa4e73a5120d2a25
SHA512 c1f264e3f7d2384c77e9479027d6c28487479a46e17d5d0e1eda7aac7d9f34f6e5e05a0933f9994fd2526009e8977460dfbab40a321eacb4da5813a3068ace72
SSDEEP 12288:GqOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4Ey+2PlMEXm:GnajQEPnvg6PhWDC750Wlu
TLSH
T1A5451890F2C1D4F6D95321729E6A962425B3BD684770DBCF2169371D8AB33C31837E8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.Nimnul.a.89891611e650cb8ae7fa0

File Explorer

jaffacakes118_Virus.Win32.Nimnul.a.89891611e650cb8ae7fa0

.exe 1.2MB

jaffacakes118_Virus.Win32.Nimnul.a.89891611e650cb8ae7fa0

IMPHASH d91550d740b6638e5f7cf382f1d255bc
SHA256 b292fc0ce76fb178b60300635466849a743ad1d86eb79a0a970f494052731592
MD5 a85317fb9e189891611e650cb8ae7fa0
SHA1 94667bd457c4daed0da7689aaa4e73a5120d2a25
SHA512 c1f264e3f7d2384c77e9479027d6c28487479a46e17d5d0e1eda7aac7d9f34f6e5e05a0933f9994fd2526009e8977460dfbab40a321eacb4da5813a3068ace72
SSDEEP 12288:GqOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4Ey+2PlMEXm:GnajQEPnvg6PhWDC750Wlu
TLSH
T1A5451890F2C1D4F6D95321729E6A962425B3BD684770DBCF2169371D8AB33C31837E8A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1171456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree HeapAlloc GetProcessHeap GetStartupInfoW RtlUnwind RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FindNextFileW ExitProcess ExitThread CreateThread HeapReAlloc HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy GetVersionExW VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime Sleep GetCPInfo GetACP GetOEMCP FindFirstFileA FindNextFileA FatalAppExitA SetConsoleCtrlHandler GetTimeZoneInformation LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA SetErrorMode GetTickCount lstrlenA GetAtomNameW GlobalFlags GetCurrentDirectoryW GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileIntW TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc WaitForMultipleObjects ReleaseMutex CreateMutexW ReleaseSemaphore CreateSemaphoreW SetFileAttributesW SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetShortPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile lstrcmpiW GetThreadLocale GetStringTypeExW DeleteFileW MoveFileW InterlockedIncrement InterlockedDecrement GetModuleHandleA GetDiskFreeSpaceW GetFullPathNameW GetTempFileNameW GetFileTime SetFileTime GetFileAttributesW GlobalGetAtomNameW GlobalFindAtomW CompareStringW LoadLibraryA GetVersionExA FreeResource GetCurrentProcessId GlobalAddAtomW CreateEventW SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority GetCurrentThread GetCurrentThreadId GetVersion EnumResourceLanguagesW lstrcmpA LoadLibraryW CompareStringA InterlockedExchange lstrcmpW FreeLibrary GlobalDeleteAtom GetModuleHandleW GetProcAddress GlobalFree CopyFileW GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageW LocalFree lstrlenW MulDiv SetLastError WideCharToMultiByte IsDBCSLeadByteEx OpenFileMappingW CreateFileMappingW MapViewOfFile UnmapViewOfFile GetLastError CreateFileW GetFileSize ReadFile CloseHandle ConvertDefaultLocale GetLocaleInfoW GetModuleFileNameW MultiByteToWideChar FindResourceW LoadResource LockResource HeapCreate SizeofResource

user32

DestroyIcon GetDialogBaseUnits GetKeyNameTextW MapVirtualKeyW GetSystemMenu SetParent UnionRect CharNextW GetNextDlgGroupItem MessageBeep UnregisterClassW RegisterClipboardFormatW GetDCEx LockWindowUpdate PostThreadMessageW DrawIcon FindWindowW SystemParametersInfoW SetCapture InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableW EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW FillRect SetWindowContextHelpId MapDialogRect UnpackDDElParam ReuseDDElParam ReleaseCapture LoadAcceleratorsW InvalidateRect InsertMenuItemW SetRectEmpty BringWindowToTop TranslateAcceleratorW ScrollWindowEx ShowWindow MoveWindow IsDialogMessageW IsDlgButtonChecked SetDlgItemTextW SetDlgItemInt GetDlgItemTextW GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageW LoadIconW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW DeleteMenu SetFocus GetWindowTextLengthW GetWindowTextW GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange GetScrollPos ShowScrollBar GetClientRect GetMenu CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo CopyRect PtInRect SetWindowPlacement GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamW DestroyWindow IsWindow GetNextDlgTabItem EndDialog GetWindowThreadProcessId IsWindowEnabled MessageBoxW ShowOwnedPopups SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow IsWindowVisible GetKeyState PeekMessageW GetCursorPos GetSysColorBrush MsgWaitForMultipleObjects WindowFromPoint IsZoomed GetMenuItemInfoW InflateRect ValidateRect SetMenuItemBitmaps CharUpperW LoadCursorW KillTimer SetTimer RemovePropW SetWindowRgn GetMenuCheckMarkDimensions LoadBitmapW GetFocus GetParent ModifyMenuW EnableMenuItem CheckMenuItem PostQuitMessage GetMenuState GetMenuStringW GetMenuItemID InsertMenuW GetMenuItemCount GetLastActivePopup IsIconic wsprintfW LoadImageW DestroyMenu GetSysColor GetWindowLongW SetWindowLongW RedrawWindow SetForegroundWindow AppendMenuW LoadMenuW GetSubMenu RemoveMenu CreatePopupMenu GetDlgItem SetWindowTextW PostMessageW SendMessageW EnableWindow UpdateWindow SetMenu SetScrollPos UnregisterClassA

gdi32

PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush GetWindowExtEx SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen ExtCreatePen CreateHatchBrush CreateRectRgnIndirect GetRgnBox CreateEllipticRgn DPtoLP PolyDraw Ellipse GetTextExtentPoint32W GetTextMetricsW GetCharWidthW CreateFontW StretchDIBits SetRectRgn CombineRgn GetMapMode PatBlt GetBkColor GetTextColor GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn SetColorAdjustment ArcTo GetCurrentPositionEx ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutW TextOutW RectVisible PtVisible StartDocW GetPixel LPtoDP GetStockObject SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC CreateCompatibleDC CreateCompatibleBitmap SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateBitmap CreateDCW CopyMetaFileW GetDeviceCaps GetTextExtentPointW GetObjectW CreateFontIndirectW DeleteObject CreateSolidBrush BitBlt

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegQueryValueW RegCreateKeyW RegDeleteValueW RegSetValueExW RegCreateKeyExW IsTextUnicode GetFileSecurityW SetFileSecurityW RegCloseKey RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegOpenKeyW RegSetValueW RegOpenKeyExA RegQueryValueExA

shell32

DragFinish DragQueryFileW SHGetFileInfoW ExtractIconW SHGetSpecialFolderPathW

comctl32

ord17

shlwapi

PathRemoveExtensionW PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oledlg

OleUIBusyW

ole32

CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance CoDisconnectObject CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CreateStreamOnHGlobal CLSIDFromString CLSIDFromProgID CoRegisterClassObject CoTreatAsClass StringFromCLSID CoTaskMemAlloc ReleaseStgMedium CreateBindCtx ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CoUninitialize OleInitialize OleSetClipboard CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter OleDuplicateData

oleaut32

LoadTypeLi SafeArrayCreateVector OleCreateFontIndirect VarBstrFromDate VarDecFromStr VarBstrFromDec VarBstrFromCy VarCyFromStr SysReAllocStringLen VarDateFromStr SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayCopy SafeArrayAllocDescriptor SafeArrayAllocData VariantCopy SafeArrayRedim SafeArrayCreate SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData SafeArrayDestroy SystemTimeToVariantTime VariantTimeToSystemTime SysStringByteLen SysAllocStringByteLen SysStringLen VariantChangeType VariantClear SysAllocStringLen SysAllocString SysFreeString VariantInit