32cbda26c9835c1c63f2fed688fb5bb9_JaffaCakes118

General

Target
32cbda26c9835c1c63f2fed688fb5bb9_JaffaCakes118
Size 10.6MB
Sample240330-eb5vssgh99
SHA256 d26320c9bf38d0c8da62667729d9c28c8c9a71bb1395bf33dff11b59cda8f6c4
MD5 32cbda26c9835c1c63f2fed688fb5bb9
SHA1 1b8b5445b2ff31e5377c0a2297672bf656695777
SHA512 34246c7b622d4ff88c401d25da883962dfba46c878bf9387f3b72942add8ccfe1785b4c5dfbacfcbbc1a3f40e866cc701ce2ff8f2334868ae16b150e61de4e5e
SSDEEP 12288:KQeoegEG/Rl1M7jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjz:KQeGX1M
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32cbda26c9835c1c63f2fed688fb5bb9_JaffaCakes118

File Explorer

32cbda26c9835c1c63f2fed688fb5bb9_JaffaCakes118

.exe 10.6MB

32cbda26c9835c1c63f2fed688fb5bb9_JaffaCakes118

IMPHASH 654aff1ee1bc89531bd3b96ebe76ae67
SHA256 d26320c9bf38d0c8da62667729d9c28c8c9a71bb1395bf33dff11b59cda8f6c4
MD5 32cbda26c9835c1c63f2fed688fb5bb9
SHA1 1b8b5445b2ff31e5377c0a2297672bf656695777
SHA512 34246c7b622d4ff88c401d25da883962dfba46c878bf9387f3b72942add8ccfe1785b4c5dfbacfcbbc1a3f40e866cc701ce2ff8f2334868ae16b150e61de4e5e
SSDEEP 12288:KQeoegEG/Rl1M7jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjz:KQeGX1M
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\biz-xuh-copujujeku.pdb

kernel32

lstrlenA InterlockedDecrement InitializeSListHead GetSystemWindowsDirectoryW HeapFree FlushViewOfFile LocalFlags LoadLibraryW FreeConsole GetSystemWow64DirectoryW SetConsoleCursorPosition GetModuleFileNameW GetOverlappedResult GetStartupInfoW CreateDirectoryA GetCPInfoExW FindFirstChangeNotificationW GetProcAddress SetVolumeLabelW SetStdHandle GetPrivateProfileStringA OpenMutexA LocalAlloc PostQueuedCompletionStatus AddAtomA FindAtomA GetPrivateProfileStructA SetEnvironmentVariableA WTSGetActiveConsoleSessionId HeapSetInformation FreeEnvironmentStringsW GetCurrentDirectoryA OutputDebugStringA GetLastError SearchPathW CloseHandle CreateFileW DeleteFileA GetCommandLineA DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedIncrement GetModuleHandleW ExitProcess GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate WriteFile EnterCriticalSection LeaveCriticalSection WriteConsoleW OutputDebugStringW GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation RtlUnwind IsProcessorFeaturePresent MultiByteToWideChar LCMapStringW GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode RaiseException FlushFileBuffers

advapi32

AbortSystemShutdownA

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

32cbda26c9835c1c63f2fed688fb5bb9_JaffaCakes118

kernel32

advapi32

winhttp

generic