jaffacakes118_Virus[.]Win32[.]Small[.]l[.]619b6ea3d2d146dfd0f00

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Virus.Win32.Small.l.619b6ea3d2d146dfd0f00
Size 111KB
Sample261015-2bhftset3l
SHA256 c42dd19c7b7f54ba52f91abd1d1f11a0d71bb83ddc1cb0d08a6b84958ffce656
MD5 177a5bb8edd619b6ea3d2d146dfd0f00
SHA1 54f969a01a4de2bfac26b24f295d6987462fedcb
SHA512 ee3bd7d8a1b3edc938ef1c1dd14c4626828ef7b2b526fb35fb58d34c3e181028d393c59d12b62eb75d547b6b9e0fe43732776dbe4c13ed3c5cb823296f56db25
SSDEEP 3072:4U+W+qNo3e9Sy/9sWWWjG7PL7KD333Cpc7C:P+WJ9SSlGrL7K+pc7C
TLSH
T101B38C61995A907BF9B023F4188B07F9C427DC1B509BD929D321FE29747F6C268BE213
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.Small.l.619b6ea3d2d146dfd0f00

File Explorer

jaffacakes118_Virus.Win32.Small.l.619b6ea3d2d146dfd0f00

.exe 111KB

jaffacakes118_Virus.Win32.Small.l.619b6ea3d2d146dfd0f00

IMPHASH 5afda5bec5ddd3ba31023406f0fca220
SHA256 c42dd19c7b7f54ba52f91abd1d1f11a0d71bb83ddc1cb0d08a6b84958ffce656
MD5 177a5bb8edd619b6ea3d2d146dfd0f00
SHA1 54f969a01a4de2bfac26b24f295d6987462fedcb
SHA512 ee3bd7d8a1b3edc938ef1c1dd14c4626828ef7b2b526fb35fb58d34c3e181028d393c59d12b62eb75d547b6b9e0fe43732776dbe4c13ed3c5cb823296f56db25
SSDEEP 3072:4U+W+qNo3e9Sy/9sWWWjG7PL7KD333Cpc7C:P+WJ9SSlGrL7K+pc7C
TLSH
T101B38C61995A907BF9B023F4188B07F9C427DC1B509BD929D321FE29747F6C268BE213
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

78104555

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

EnumWindows GetWindowTextA GetWindowThreadProcessId CharUpperA MessageBoxA GetWindowTextLengthA

shell32

ShellExecuteA

dbghelp

MakeSureDirectoryPathExists

urlmon

URLDownloadToFileA

msvcrt

_controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit fwrite srand rand strstr _splitpath atoi tolower fopen fclose strchr sprintf _strlwr _strrev _strupr

wininet

InternetGetConnectedState

wsock32

connect gethostbyname recv shutdown closesocket WSACleanup htons socket WSAStartup __WSAFDIsSet select WSAGetLastError inet_ntoa send

advapi32

RegCreateKeyA AdjustTokenPrivileges RegOpenKeyExA RegQueryValueExA GetUserNameA RegCloseKey LookupPrivilegeValueA OpenProcessToken RegSetValueExA

kernel32

WinExec GetCurrentThread SetThreadPriority ExitThread CreateThread Sleep GetVersionExA GetComputerNameA FreeLibrary LoadLibraryA GetProcAddress GetModuleFileNameA GetSystemDirectoryA GetWindowsDirectoryA GetTempPathA CreateSemaphoreA ReleaseSemaphore CreateEventA ExitProcess CreateMutexA GetLastError lstrlenA GetTickCount lstrcpyA GetCurrentProcess GetModuleHandleA GetCurrentProcessId CreateToolhelp32Snapshot Process32First OpenProcess TerminateProcess Process32Next GetSystemTime CreateProcessA WritePrivateProfileStringA CreateDirectoryA CreateFileA CloseHandle GlobalFree GlobalAlloc GetStartupInfoA SetFileAttributesA CopyFileA ReleaseMutex GetDriveTypeA