4554b2e507e6c89c9a7d51097f2f155f_JaffaCakes118

General

Target
4554b2e507e6c89c9a7d51097f2f155f_JaffaCakes118
Size 332KB
Sample240330-1wt5pafe7v
SHA256 be032b655d9a935fbca887adfc5e478085b7d64c96720c57da870c2d463ed881
MD5 4554b2e507e6c89c9a7d51097f2f155f
SHA1 3266d2f320b9fa50051570da99e7ed62046e2203
SHA512 79c4d1e8df906405e729dc42fa0205d5d792d23e4227e558a5f5ceec2f2d23875c5edf635ffc592a49ef5f4547c866adb262ee9197a0e10c9fc08343264d0fb7
SSDEEP 3072:NC7BSM9qPJ5nlqHBJR4RAHjxT0uRdDh/SQgnSpI/7C4YmIBPoeWUNSJ/Hf9ArjxE:NHUR/DiuFZudzCvvPSJ/HfmoIZ0AMz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4554b2e507e6c89c9a7d51097f2f155f_JaffaCakes118

File Explorer

4554b2e507e6c89c9a7d51097f2f155f_JaffaCakes118

.exe 332KB

4554b2e507e6c89c9a7d51097f2f155f_JaffaCakes118

IMPHASH 6a88739b00d2f75a49bbb4078e077ebf
SHA256 be032b655d9a935fbca887adfc5e478085b7d64c96720c57da870c2d463ed881
MD5 4554b2e507e6c89c9a7d51097f2f155f
SHA1 3266d2f320b9fa50051570da99e7ed62046e2203
SHA512 79c4d1e8df906405e729dc42fa0205d5d792d23e4227e558a5f5ceec2f2d23875c5edf635ffc592a49ef5f4547c866adb262ee9197a0e10c9fc08343264d0fb7
SSDEEP 3072:NC7BSM9qPJ5nlqHBJR4RAHjxT0uRdDh/SQgnSpI/7C4YmIBPoeWUNSJ/Hf9ArjxE:NHUR/DiuFZudzCvvPSJ/HfmoIZ0AMz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

101360

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\joris\dun.pdb

kernel32

GetSystemDefaultLangID ExitProcess GetConsoleAliasesLengthW GetCPInfo InterlockedDecrement AddConsoleAliasW FreeEnvironmentStringsA GetModuleHandleW GetTickCount SetFileTime CreateActCtxW GlobalAlloc GetConsoleMode TerminateThread GetVersionExW IsBadWritePtr FileTimeToSystemTime LocalHandle GetEnvironmentVariableA CompareStringW lstrlenW VerifyVersionInfoW GetStartupInfoA FindFirstFileExA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress WriteProfileSectionA CopyFileA GlobalGetAtomNameA SearchPathA ProcessIdToSessionId OpenWaitableTimerW MoveFileA SetCurrentDirectoryW WriteProfileSectionW GetModuleFileNameA WriteProfileStringA GetModuleHandleA GetProcessShutdownParameters FreeEnvironmentStringsW SetFileShortNameA TlsAlloc GetWindowsDirectoryW DeleteFileW LocalFileTimeToFileTime GetStartupInfoW HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree GetLastError QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc SetFilePointer WideCharToMultiByte GetConsoleCP InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW RtlUnwind MultiByteToWideChar GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetLocaleInfoA LoadLibraryA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

4554b2e507e6c89c9a7d51097f2f155f_JaffaCakes118

kernel32

generic