jaffacakes118_05948f9bd3d7e561ff10dc11bc8bc326166cebb545242dda4b24676e723f867f[.]bin

General

Target
jaffacakes118_05948f9bd3d7e561ff10dc11bc8bc326166cebb545242dda4b24676e723f867f.bin
Size 467KB
Sample261018-xrd15ahy21
SHA256 05948f9bd3d7e561ff10dc11bc8bc326166cebb545242dda4b24676e723f867f
MD5 368019c6e6f357401fb816c7808598ec
SHA1 9d57df70134dbe12c9a254795959ec7e8bb4976b
SHA512 acf66b27aa771dcba12ea19f38e33fcde58ecc12f16defbda89e11758be8d1d9972b5ff616ada6ec88081abe1a8428df1323ed7b0c93bd0063b52bd9f7ab28b8
SSDEEP 6144:J9I8JbcxX8Tc65ypVk621ru2djfRX7dgcTrxfX9/s3JAIAmmJNk/uo8w8dvSRzNz:3aXWBFnPr+cTX/kJoL681+xz
TLSH
T124A4D0453698403CEC7B9238C853494BD2B5F86E5534970E0393566EEF2F36192EAF2E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_05948f9bd3d7e561ff10dc11bc8bc326166cebb545242dda4b24676e723f867f.bin

File Explorer

jaffacakes118_05948f9bd3d7e561ff10dc11bc8bc326166cebb545242dda4b24676e723f867f.bin

.dll 467KB

jaffacakes118_05948f9bd3d7e561ff10dc11bc8bc326166cebb545242dda4b24676e723f867f.bin

IMPHASH e305375cfc41ce54f56462205012b1fb
SHA256 05948f9bd3d7e561ff10dc11bc8bc326166cebb545242dda4b24676e723f867f
MD5 368019c6e6f357401fb816c7808598ec
SHA1 9d57df70134dbe12c9a254795959ec7e8bb4976b
SHA512 acf66b27aa771dcba12ea19f38e33fcde58ecc12f16defbda89e11758be8d1d9972b5ff616ada6ec88081abe1a8428df1323ed7b0c93bd0063b52bd9f7ab28b8
SSDEEP 6144:J9I8JbcxX8Tc65ypVk621ru2djfRX7dgcTrxfX9/s3JAIAmmJNk/uo8w8dvSRzNz:3aXWBFnPr+cTX/kJoL681+xz
TLSH
T124A4D0453698403CEC7B9238C853494BD2B5F86E5534970E0393566EEF2F36192EAF2E
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

63340

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

CreateFileW SetEndOfFile ExitProcess WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer GetLastError HeapFree HeapAlloc GetCommandLineA GetCurrentThreadId RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetCPInfo RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress IsProcessorFeaturePresent LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsDebuggerPresent GetStdHandle GetFileType CloseHandle GetProcessHeap GetModuleHandleExW AreFileApisANSI WriteFile GetModuleFileNameW HeapSize GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetACP IsValidCodePage GetOEMCP HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx SetStdHandle LoadLibraryExW OutputDebugStringW WriteConsoleW ReadConsoleW

ole32

CoLoadLibrary

crypt32

CryptStringToBinaryA

Sharing