5ed6ba01ad795934965e6a410684a631_JaffaCakes118

General

Target
5ed6ba01ad795934965e6a410684a631_JaffaCakes118
Size 593KB
Sample240331-1jejgach8v
SHA256 4abac2b9a8d77a552f9de8430e84ce05fef7534077a3696e4eb4f358ae14fadc
MD5 5ed6ba01ad795934965e6a410684a631
SHA1 184626eecc712e727a2488afe873c5b0d6c94612
SHA512 d02c532aa1d26d0cd81d27e1c8cf48a17be2ee9cefffdfd320a8c7d2397ce4959c8aac9865ce13298633abf4057bdf204f76a6492810f99cc1e7157917a5ba76
SSDEEP 12288:q5EIZy6umDvuiMN98QxI3AXpwqovrjnlM0ko5GHLg:q5EIJjuiS986I3+wrlM0kP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ed6ba01ad795934965e6a410684a631_JaffaCakes118

File Explorer

5ed6ba01ad795934965e6a410684a631_JaffaCakes118

.exe 593KB

5ed6ba01ad795934965e6a410684a631_JaffaCakes118

IMPHASH b4cda15a674ef12000829b9be50880b2
SHA256 4abac2b9a8d77a552f9de8430e84ce05fef7534077a3696e4eb4f358ae14fadc
MD5 5ed6ba01ad795934965e6a410684a631
SHA1 184626eecc712e727a2488afe873c5b0d6c94612
SHA512 d02c532aa1d26d0cd81d27e1c8cf48a17be2ee9cefffdfd320a8c7d2397ce4959c8aac9865ce13298633abf4057bdf204f76a6492810f99cc1e7157917a5ba76
SSDEEP 12288:q5EIZy6umDvuiMN98QxI3AXpwqovrjnlM0ko5GHLg:q5EIJjuiS986I3+wrlM0kP
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

412944

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\galiyamuhaxe-33 vakem.pdb

kernel32

InterlockedDecrement FindFirstFileExW OutputDebugStringW GetModuleHandleW GetTickCount IsBadReadPtr GetConsoleAliasesLengthA SetFileShortNameW TerminateThread GetVersionExW LocalHandle GetModuleFileNameW GetEnvironmentVariableA ExitThread lstrlenW GetStartupInfoW GetConsoleOutputCP SetCurrentDirectoryA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA MoveFileW WriteProfileSectionA CopyFileA GlobalGetAtomNameA SearchPathA _hwrite OpenWaitableTimerA LoadLibraryA ProcessIdToSessionId OpenWaitableTimerW LocalAlloc WriteProfileSectionW GetOEMCP GetProcessShutdownParameters FreeEnvironmentStringsW CompareStringA GetFileTime GetWindowsDirectoryW DeleteTimerQueueTimer DeleteFileW AddConsoleAliasA CloseHandle CreateFileW WideCharToMultiByte InterlockedIncrement MultiByteToWideChar InterlockedExchange EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapValidate GetCommandLineW HeapSetInformation GetCPInfo RtlUnwind RaiseException LCMapStringW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount HeapAlloc GetModuleFileNameA GetLastError HeapReAlloc HeapSize HeapQueryInformation HeapFree HeapCreate GetACP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType WriteFile GetStringTypeW GetLocaleInfoW OutputDebugStringA WriteConsoleW LoadLibraryW GetLocaleInfoA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

5ed6ba01ad795934965e6a410684a631_JaffaCakes118

kernel32

user32

generic