jaffacakes118_Virus[.]Win32[.]Nimnul[.]a[.]35018ba9753c4a3fb33b0

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Virus.Win32.Nimnul.a.35018ba9753c4a3fb33b0
Size 1.3MB
Sample261018-ta2jbaf13s
SHA256 c207b62972589c9651a04eeb21b48d337f7c9bd9b942c6f61538faa18707b0f8
MD5 a8070e526f135018ba9753c4a3fb33b0
SHA1 965c0f5a72041118d38ae500f3ce547ce87915d9
SHA512 91b05568840f3e6458f58db89f06dee61e8ed53eccf28b914c8eed6381e1abaf7ccbbd0097f870bc74522c3f1025b5a75084756f68e4c603336e203dd3c00ff8
SSDEEP 12288:FqOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4Ey+rzk7zYdBNn:FnajQEPnvg6PhWDC750vk7Cp
TLSH
T153555C40F2C5D475D84721B25D6ADA3525A3BE2847789BCF25AA370D8AF33C32537E0A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.Nimnul.a.35018ba9753c4a3fb33b0

File Explorer

jaffacakes118_Virus.Win32.Nimnul.a.35018ba9753c4a3fb33b0

.exe 1.3MB

jaffacakes118_Virus.Win32.Nimnul.a.35018ba9753c4a3fb33b0

IMPHASH d91550d740b6638e5f7cf382f1d255bc
SHA256 c207b62972589c9651a04eeb21b48d337f7c9bd9b942c6f61538faa18707b0f8
MD5 a8070e526f135018ba9753c4a3fb33b0
SHA1 965c0f5a72041118d38ae500f3ce547ce87915d9
SHA512 91b05568840f3e6458f58db89f06dee61e8ed53eccf28b914c8eed6381e1abaf7ccbbd0097f870bc74522c3f1025b5a75084756f68e4c603336e203dd3c00ff8
SSDEEP 12288:FqOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4Ey+rzk7zYdBNn:FnajQEPnvg6PhWDC750vk7Cp
TLSH
T153555C40F2C5D475D84721B25D6ADA3525A3BE2847789BCF25AA370D8AF33C32537E0A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1171456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree HeapAlloc GetProcessHeap GetStartupInfoW RtlUnwind RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FindNextFileW ExitProcess ExitThread CreateThread HeapReAlloc HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy GetVersionExW VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime Sleep GetCPInfo GetACP GetOEMCP FindFirstFileA FindNextFileA FatalAppExitA SetConsoleCtrlHandler GetTimeZoneInformation LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA SetErrorMode GetTickCount lstrlenA GetAtomNameW GlobalFlags GetCurrentDirectoryW GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileIntW TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc WaitForMultipleObjects ReleaseMutex CreateMutexW ReleaseSemaphore CreateSemaphoreW SetFileAttributesW SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetShortPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile lstrcmpiW GetThreadLocale GetStringTypeExW DeleteFileW MoveFileW InterlockedIncrement InterlockedDecrement GetModuleHandleA GetDiskFreeSpaceW GetFullPathNameW GetTempFileNameW GetFileTime SetFileTime GetFileAttributesW GlobalGetAtomNameW GlobalFindAtomW CompareStringW LoadLibraryA GetVersionExA FreeResource GetCurrentProcessId GlobalAddAtomW CreateEventW SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority GetCurrentThread GetCurrentThreadId GetVersion EnumResourceLanguagesW lstrcmpA LoadLibraryW CompareStringA InterlockedExchange lstrcmpW FreeLibrary GlobalDeleteAtom GetModuleHandleW GetProcAddress GlobalFree CopyFileW GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageW LocalFree lstrlenW MulDiv SetLastError WideCharToMultiByte IsDBCSLeadByteEx OpenFileMappingW CreateFileMappingW MapViewOfFile UnmapViewOfFile GetLastError CreateFileW GetFileSize ReadFile CloseHandle ConvertDefaultLocale GetLocaleInfoW GetModuleFileNameW MultiByteToWideChar FindResourceW LoadResource LockResource HeapCreate SizeofResource

user32

DestroyIcon GetDialogBaseUnits GetKeyNameTextW MapVirtualKeyW GetSystemMenu SetParent UnionRect CharNextW GetNextDlgGroupItem MessageBeep UnregisterClassW RegisterClipboardFormatW GetDCEx LockWindowUpdate PostThreadMessageW DrawIcon FindWindowW SystemParametersInfoW SetCapture InvalidateRgn SetRect IsRectEmpty CopyAcceleratorTableW EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW FillRect SetWindowContextHelpId MapDialogRect UnpackDDElParam ReuseDDElParam ReleaseCapture LoadAcceleratorsW InvalidateRect InsertMenuItemW SetRectEmpty BringWindowToTop TranslateAcceleratorW ScrollWindowEx ShowWindow MoveWindow IsDialogMessageW IsDlgButtonChecked SetDlgItemTextW SetDlgItemInt GetDlgItemTextW GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageW LoadIconW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW DeleteMenu SetFocus GetWindowTextLengthW GetWindowTextW GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange GetScrollPos ShowScrollBar GetClientRect GetMenu CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo CopyRect PtInRect SetWindowPlacement GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow GetDesktopWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamW DestroyWindow IsWindow GetNextDlgTabItem EndDialog GetWindowThreadProcessId IsWindowEnabled MessageBoxW ShowOwnedPopups SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow IsWindowVisible GetKeyState PeekMessageW GetCursorPos GetSysColorBrush MsgWaitForMultipleObjects WindowFromPoint IsZoomed GetMenuItemInfoW InflateRect ValidateRect SetMenuItemBitmaps CharUpperW LoadCursorW KillTimer SetTimer RemovePropW SetWindowRgn GetMenuCheckMarkDimensions LoadBitmapW GetFocus GetParent ModifyMenuW EnableMenuItem CheckMenuItem PostQuitMessage GetMenuState GetMenuStringW GetMenuItemID InsertMenuW GetMenuItemCount GetLastActivePopup IsIconic wsprintfW LoadImageW DestroyMenu GetSysColor GetWindowLongW SetWindowLongW RedrawWindow SetForegroundWindow AppendMenuW LoadMenuW GetSubMenu RemoveMenu CreatePopupMenu GetDlgItem SetWindowTextW PostMessageW SendMessageW EnableWindow UpdateWindow SetMenu SetScrollPos UnregisterClassA

gdi32

PolylineTo PolyBezierTo ExtSelectClipRgn DeleteDC CreateDIBPatternBrushPt CreatePatternBrush GetWindowExtEx SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen ExtCreatePen CreateHatchBrush CreateRectRgnIndirect GetRgnBox CreateEllipticRgn DPtoLP PolyDraw Ellipse GetTextExtentPoint32W GetTextMetricsW GetCharWidthW CreateFontW StretchDIBits SetRectRgn CombineRgn GetMapMode PatBlt GetBkColor GetTextColor GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn SetColorAdjustment ArcTo GetCurrentPositionEx ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutW TextOutW RectVisible PtVisible StartDocW GetPixel LPtoDP GetStockObject SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC CreateCompatibleDC CreateCompatibleBitmap SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateBitmap CreateDCW CopyMetaFileW GetDeviceCaps GetTextExtentPointW GetObjectW CreateFontIndirectW DeleteObject CreateSolidBrush BitBlt

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegQueryValueW RegCreateKeyW RegDeleteValueW RegSetValueExW RegCreateKeyExW IsTextUnicode GetFileSecurityW SetFileSecurityW RegCloseKey RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegOpenKeyW RegSetValueW RegOpenKeyExA RegQueryValueExA

shell32

DragFinish DragQueryFileW SHGetFileInfoW ExtractIconW SHGetSpecialFolderPathW

comctl32

ord17

shlwapi

PathRemoveExtensionW PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oledlg

OleUIBusyW

ole32

CoFreeUnusedLibraries OleUninitialize OleRun StringFromGUID2 CoCreateInstance CoDisconnectObject CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CreateStreamOnHGlobal CLSIDFromString CLSIDFromProgID CoRegisterClassObject CoTreatAsClass StringFromCLSID CoTaskMemAlloc ReleaseStgMedium CreateBindCtx ReadClassStg ReadFmtUserTypeStg OleRegGetUserType WriteClassStg WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CoUninitialize OleInitialize OleSetClipboard CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter OleDuplicateData

oleaut32

LoadTypeLi SafeArrayCreateVector OleCreateFontIndirect VarBstrFromDate VarDecFromStr VarBstrFromDec VarBstrFromCy VarCyFromStr SysReAllocStringLen VarDateFromStr SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayCopy SafeArrayAllocDescriptor SafeArrayAllocData VariantCopy SafeArrayRedim SafeArrayCreate SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetLBound SafeArrayGetUBound SafeArrayAccessData SafeArrayUnaccessData SafeArrayDestroy SystemTimeToVariantTime VariantTimeToSystemTime SysStringByteLen SysAllocStringByteLen SysStringLen VariantChangeType VariantClear SysAllocStringLen SysAllocString SysFreeString VariantInit