jaffacakes118_4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93

General

Target
jaffacakes118_4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93
Size 349KB
Sample261016-j6md6agf48
SHA256 4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93
MD5 567982f5c7be86387435016e3984862f
SHA1 e9b0977f0583750ccc708c9b35f7c9d7e45f5f4f
SHA512 240b311cd63a789ce16b0bdcc834cde13add6a13d5ab36fa030171de303341b291a105b1d2ddb0b361cc0d59906042f9e54bcc70733882e16895516382c19089
SSDEEP 6144:LQd66y30oCVRphul+XTetAOenVRqgfW6JPmCDW3YDzugieHQbLLKW1:LBJ30oCVRQ+VRqgfWIeCDz9iewbLT1
TLSH
T1D374AE10F592C833D4A1193208E4DEF58B2DB5217FA19AFB97A44AFE3E305D186B18F5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93

File Explorer

jaffacakes118_4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93

.exe 349KB

jaffacakes118_4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93

IMPHASH 6897668735e7ebf45221263d5090ec47
SHA256 4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93
MD5 567982f5c7be86387435016e3984862f
SHA1 e9b0977f0583750ccc708c9b35f7c9d7e45f5f4f
SHA512 240b311cd63a789ce16b0bdcc834cde13add6a13d5ab36fa030171de303341b291a105b1d2ddb0b361cc0d59906042f9e54bcc70733882e16895516382c19089
SSDEEP 6144:LQd66y30oCVRphul+XTetAOenVRqgfW6JPmCDW3YDzugieHQbLLKW1:LBJ30oCVRQ+VRqgfWIeCDz9iewbLT1
TLSH
T1D374AE10F592C833D4A1193208E4DEF58B2DB5217FA19AFB97A44AFE3E305D186B18F5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

36088

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo CloseHandle InitializeCriticalSectionAndSpinCount CreateEventW GetModuleHandleW GetProcAddress UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead CreateFileW RtlUnwind RaiseException GetLastError SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle HeapSize WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93

kernel32

generic