jaffacakes118_0165f8fbdee5dc0cdf42bce46b3516572472ea9ba74c6b0e2afb99a117641db7

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_0165f8fbdee5dc0cdf42bce46b3516572472ea9ba74c6b0e2afb99a117641db7
Size 3.2MB
Sample261016-jpsvlsvs6l
SHA256 0165f8fbdee5dc0cdf42bce46b3516572472ea9ba74c6b0e2afb99a117641db7
MD5 51c2ed4d8aa54153598a80ee78bd4660
SHA1 79b86189431cb7a1e4b462b2ba7963c9ba50ab44
SHA512 a206633f3bb141d43c950ceeb044fb826d20194c95a89d75c63bc630b3e8e2280283e340236b7227b0ed0bae4d295c9a49478f9deb9c133e91391dbaf3c7687a
SSDEEP 49152:E/sc7d6mv3WkTLKK92zAVjVwAfIUbOvdDtkasalNl3M:E/sc7d6mv3xHKK92MvKNkasalY
TLSH
T166F56C135A8B0D79DED23BB461CB633EA734ED30CA2A9B7FB708C42559532C46C5A742
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_0165f8fbdee5dc0cdf42bce46b3516572472ea9ba74c6b0e2afb99a117641db7

File Explorer

jaffacakes118_0165f8fbdee5dc0cdf42bce46b3516572472ea9ba74c6b0e2afb99a117641db7

.exe 3.2MB

jaffacakes118_0165f8fbdee5dc0cdf42bce46b3516572472ea9ba74c6b0e2afb99a117641db7

IMPHASH 4718c85fe28e792412bf1679bc40c971
SHA256 0165f8fbdee5dc0cdf42bce46b3516572472ea9ba74c6b0e2afb99a117641db7
MD5 51c2ed4d8aa54153598a80ee78bd4660
SHA1 79b86189431cb7a1e4b462b2ba7963c9ba50ab44
SHA512 a206633f3bb141d43c950ceeb044fb826d20194c95a89d75c63bc630b3e8e2280283e340236b7227b0ed0bae4d295c9a49478f9deb9c133e91391dbaf3c7687a
SSDEEP 49152:E/sc7d6mv3WkTLKK92zAVjVwAfIUbOvdDtkasalNl3M:E/sc7d6mv3xHKK92MvKNkasalY
TLSH
T166F56C135A8B0D79DED23BB461CB633EA734ED30CA2A9B7FB708C42559532C46C5A742
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle CreateSemaphoreW DeleteCriticalSection EnterCriticalSection FreeLibrary GetCurrentProcess GetCurrentProcessId GetCurrentProcessorNumber GetCurrentThreadId GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetStartupInfoA GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryA MultiByteToWideChar QueryPerformanceCounter ReleaseSemaphore SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte

msvcrt

___mb_cur_max_func __doserrno __getmainargs __initenv __lconv_init __p__acmdln __p__fmode __pioinfo __set_app_type __setusermatherr _amsg_exit _cexit _errno _fdopen _filelengthi64 _fileno _fileno _fmode _fpreset _fstat64 _initterm _iob _lseeki64 _onexit _read _strnicmp _write _write abort atoi calloc exit fclose fflush fgetpos fopen fprintf fputc fputs fread free fsetpos fwrite getc getwc isspace iswctype localeconv malloc memchr memcmp memcpy memmove memset putc putwc realloc setlocale setvbuf signal sprintf strchr strcmp strcoll strerror strftime strlen strncmp strtoul strxfrm towlower towupper ungetc ungetwc vfprintf wcscoll wcsftime wcslen wcsxfrm

Name

.text

Size

805KB

Virtual Size

804KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

802KB

Virtual Size

802KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

84KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

242KB

Virtual Size

242KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

/14

Size

512B

Virtual Size

272B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

161KB

Virtual Size

160KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

1024B

Virtual Size

580B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/91

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/102

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_0165f8fbdee5dc0cdf42bce46b3516572472ea9ba74c6b0e2afb99a117641db7

kernel32

msvcrt

generic