2e7ecfe9b6cf170c73540e348009f178_JaffaCakes118

General

Target
2e7ecfe9b6cf170c73540e348009f178_JaffaCakes118
Size 513KB
Sample240329-3mlhasca7v
SHA256 c3236aee6db7f0f80eb9df9761afd6aff45edcb527c7deb9048c46e6cc84f454
MD5 2e7ecfe9b6cf170c73540e348009f178
SHA1 97bb8284353f0eb0ee86c23f98d1249fec2cbcd7
SHA512 0f5fbc0a39b06e49f7fdb6b80ac1764a2cb15a79b34ab8a70124364149a9d5f4da60d398b413c03a084dfa2c0b63b7a201e3fe1c8100b0f070866bed204bc91c
SSDEEP 12288:3E4P+bYnH/tvQKU4xvZr2mmF286h4cuNoampNj:3r+UH/qKZr5ZCo1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e7ecfe9b6cf170c73540e348009f178_JaffaCakes118

File Explorer

2e7ecfe9b6cf170c73540e348009f178_JaffaCakes118

.exe 513KB

2e7ecfe9b6cf170c73540e348009f178_JaffaCakes118

IMPHASH b5bba1205063d68f42752ae70da4cabc
SHA256 c3236aee6db7f0f80eb9df9761afd6aff45edcb527c7deb9048c46e6cc84f454
MD5 2e7ecfe9b6cf170c73540e348009f178
SHA1 97bb8284353f0eb0ee86c23f98d1249fec2cbcd7
SHA512 0f5fbc0a39b06e49f7fdb6b80ac1764a2cb15a79b34ab8a70124364149a9d5f4da60d398b413c03a084dfa2c0b63b7a201e3fe1c8100b0f070866bed204bc91c
SSDEEP 12288:3E4P+bYnH/tvQKU4xvZr2mmF286h4cuNoampNj:3r+UH/qKZr5ZCo1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

353968

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jahoye rami\lah\votetipulavu.pdb

kernel32

InterlockedDecrement FindFirstFileExW OutputDebugStringW GetModuleHandleW GetTickCount IsBadReadPtr GetConsoleAliasesLengthA SetFileShortNameW TerminateThread GetVersionExW LocalHandle GetModuleFileNameW GetEnvironmentVariableA ExitThread lstrlenW GetStartupInfoW GetConsoleOutputCP SetCurrentDirectoryA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA MoveFileW WriteProfileSectionA CopyFileA GlobalGetAtomNameA SearchPathA _hwrite OpenWaitableTimerA LoadLibraryA ProcessIdToSessionId OpenWaitableTimerW LocalAlloc WriteProfileSectionW GetOEMCP GetProcessShutdownParameters FreeEnvironmentStringsW CompareStringA GetFileTime GetWindowsDirectoryW DeleteTimerQueueTimer DeleteFileW AddConsoleAliasA CloseHandle CreateFileW GetCommandLineW HeapSetInformation SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedIncrement DecodePointer ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetLastError HeapCreate WriteFile GetACP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW OutputDebugStringA WriteConsoleW IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode RaiseException SetStdHandle FlushFileBuffers

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

2e7ecfe9b6cf170c73540e348009f178_JaffaCakes118

kernel32

user32

generic