056cf3551e97f490b0369c619be2eebe_JaffaCakes118

General

Target
056cf3551e97f490b0369c619be2eebe_JaffaCakes118
Size 14.8MB
Sample240328-phs5paaa59
SHA256 2d2f3834995473d4666f0631ecc070cedeec7989335f3c6bbab27d97a7bec42c
MD5 056cf3551e97f490b0369c619be2eebe
SHA1 e1f3c0c1e9e24829c4d8429162ab42ff4742236a
SHA512 23fb64872da0d92c0366159e225f6b7e2a8baa499791212d22f5a81a32433fabed02adb76cf3d38d45e4181a22e0eb71cef3e58f0416a55cb9efd7d109361de3
SSDEEP 6144:whs/wyHHRdbJ9yTwvobkepF5b3pi2+ETJcyIjh:whsYyHHRdbTyUwDpF515+ETN8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
056cf3551e97f490b0369c619be2eebe_JaffaCakes118

File Explorer

056cf3551e97f490b0369c619be2eebe_JaffaCakes118

.exe 14.8MB

056cf3551e97f490b0369c619be2eebe_JaffaCakes118

IMPHASH fca1d58205e9c77175b87324501ec95c
SHA256 2d2f3834995473d4666f0631ecc070cedeec7989335f3c6bbab27d97a7bec42c
MD5 056cf3551e97f490b0369c619be2eebe
SHA1 e1f3c0c1e9e24829c4d8429162ab42ff4742236a
SHA512 23fb64872da0d92c0366159e225f6b7e2a8baa499791212d22f5a81a32433fabed02adb76cf3d38d45e4181a22e0eb71cef3e58f0416a55cb9efd7d109361de3
SSDEEP 6144:whs/wyHHRdbJ9yTwvobkepF5b3pi2+ETJcyIjh:whsYyHHRdbTyUwDpF515+ETN8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

117408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\not\82_dapuxex\polavan\xocoji.pdb

kernel32

ExitProcess GetEnvironmentVariableW FileTimeToDosDateTime CreateTimerQueue SearchPathW GetCPInfo InterlockedDecrement GetSystemWindowsDirectoryW AddConsoleAliasW FlushViewOfFile FreeEnvironmentStringsA OutputDebugStringW LoadLibraryW GetSystemWow64DirectoryW SetSystemTimeAdjustment GetModuleFileNameW CreateActCtxA CompareStringW lstrlenW GetStartupInfoW OpenMutexW FindFirstFileExA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress SetVolumeLabelW SearchPathA _hwrite OpenWaitableTimerA RegisterWaitForSingleObject LocalAlloc SetConsoleOutputCP SetCurrentDirectoryW WriteProfileSectionW AddAtomA GetModuleFileNameA WTSGetActiveConsoleSessionId CreateIoCompletionPort GetModuleHandleA QueryMemoryResourceNotification FreeEnvironmentStringsW RequestWakeupLatency FillConsoleOutputAttribute SetProcessShutdownParameters GetVersionExA DeleteFileW CloseHandle CreateFileW InterlockedIncrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetCommandLineW HeapSetInformation RaiseException GetModuleHandleW GetLastError WriteFile GetStdHandle IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount HeapValidate IsBadReadPtr OutputDebugStringA WriteConsoleW GetFileType QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount TlsAlloc TlsGetValue TlsSetValue TlsFree HeapCreate GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind MultiByteToWideChar WideCharToMultiByte LCMapStringW GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers

user32

GetMessageTime

Sharing

General

Malware Config

Signatures

File Explorer

056cf3551e97f490b0369c619be2eebe_JaffaCakes118

kernel32

user32

generic