jaffacakes118_Virus[.]Win32[.]Nimnul[.]a[.]8c1d1bd9b72164d350fbd463dcbc2886

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Virus.Win32.Nimnul.a.8c1d1bd9b72164d350fbd463dcbc2886
Size 232KB
Sample261014-plpxfacz6x
SHA256 137314ad1e57832e676d3d74c75815dd450abb1b01d46abef6bd63a1268def13
MD5 8c1d1bd9b72164d350fbd463dcbc2886
SHA1 2d516132497f2d8cb55274b6fa0029fd42f53830
SHA512 92bcbf8d0ca940bad6f99994e36039103ed44d4e041766afe5d03d150c3fa2e3dfeca6bf9f20cd446774cdf3722e3729a9b4835f88137466c8951c7542dc498e
SSDEEP 6144:lDu9wy/NUj973q0kFCr1MGMfoDO5hs2oEJ/tv6r:lDuey/TsMGBDOjs
TLSH
T19134BE1575E0C631DC21CE70486DB736A6FEB9F7271C8E87A788056D5F7E780A20A683
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.Nimnul.a.8c1d1bd9b72164d350fbd463dcbc2886

File Explorer

jaffacakes118_Virus.Win32.Nimnul.a.8c1d1bd9b72164d350fbd463dcbc2886

.dll 232KB

jaffacakes118_Virus.Win32.Nimnul.a.8c1d1bd9b72164d350fbd463dcbc2886

IMPHASH 1d7378d91e2800b2157b29f7cf9bf840
SHA256 137314ad1e57832e676d3d74c75815dd450abb1b01d46abef6bd63a1268def13
MD5 8c1d1bd9b72164d350fbd463dcbc2886
SHA1 2d516132497f2d8cb55274b6fa0029fd42f53830
SHA512 92bcbf8d0ca940bad6f99994e36039103ed44d4e041766afe5d03d150c3fa2e3dfeca6bf9f20cd446774cdf3722e3729a9b4835f88137466c8951c7542dc498e
SSDEEP 6144:lDu9wy/NUj973q0kFCr1MGMfoDO5hs2oEJ/tv6r:lDuey/TsMGBDOjs
TLSH
T19134BE1575E0C631DC21CE70486DB736A6FEB9F7271C8E87A788056D5F7E780A20A683
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

180224

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ole32

ReleaseStgMedium

advapi32

RegCloseKey RegCreateKeyExA RegDeleteKeyA RegEnumKeyExA RegEnumValueA RegOpenKeyExA RegQueryValueExA RegQueryValueExW RegSetValueExA

kernel32

CloseHandle CompareStringA CreateDirectoryA CreateFileA CreateFileW CreateProcessA DeleteCriticalSection DeleteFileA DeleteFileW DosDateTimeToFileTime EnterCriticalSection ExitProcess ExpandEnvironmentStringsA FileTimeToDosDateTime FileTimeToLocalFileTime FindClose FindFirstFileA FindNextFileA FindResourceA FreeEnvironmentStringsA FreeLibrary GetACP GetCPInfo GetCurrentProcessId GetCurrentThreadId GetEnvironmentStrings GetFileAttributesA GetFileAttributesW GetFileType GetFullPathNameA GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetNumberFormatA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeW GetTempPathA GetTickCount GetVersion GetVersionExA GlobalMemoryStatus HeapAlloc HeapFree InitializeCriticalSection IsDBCSLeadByte LCMapStringA LeaveCriticalSection LoadLibraryA LocalFileTimeToFileTime MultiByteToWideChar RaiseException ReadFile RtlUnwind SetConsoleCtrlHandler SetFilePointer SetHandleCount SetLastError Sleep SystemTimeToFileTime UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile lstrcpynA lstrcpynW

comctl32

ord8 CreatePropertySheetPageA DestroyPropertySheetPage

gdi32

CreateCompatibleDC CreateFontA CreatePen CreateSolidBrush DeleteDC DeleteObject GetObjectA GetPixel GetTextFaceA GetTextMetricsA Polygon Polyline SelectObject SetBkColor SetPixel SetTextColor TextOutA

shell32

DragQueryFileA DragQueryFileW SHGetPathFromIDListA

user32

BeginPaint CharLowerA CharLowerW CharToOemA CharUpperA CharUpperW CreatePopupMenu EndPaint EnumThreadWindows GetClassNameA GetClientRect GetDC GetDlgItem GetDlgItemTextA GetParent GetSysColor GetSystemMetrics GetWindow GetWindowLongA GetWindowRect GetWindowTextA InsertMenuItemA InvalidateRect LoadImageA LoadStringA MessageBoxA OemToCharA ReleaseDC SendDlgItemMessageA SendMessageA SetDlgItemTextA SetWindowLongA SetWindowPos SetWindowTextA ShowWindow wsprintfA

Name

.text

Size

94KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

108KB

Virtual Size

112KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_Virus.Win32.Nimnul.a.8c1d1bd9b72164d350fbd463dcbc2886

ole32

advapi32

kernel32

comctl32

gdi32

shell32

user32

generic