600a18d8f3a33835b0bffff6263886ae_JaffaCakes118

General

Target
600a18d8f3a33835b0bffff6263886ae_JaffaCakes118
Size 301KB
Sample240331-2h24taee52
SHA256 a21ea821be6b36a22a8f8ea4dd5826d389d31445936581d28b17a56ccbb120a2
MD5 600a18d8f3a33835b0bffff6263886ae
SHA1 09c910376befe91f7b7e63b56ae4a31583b0be0a
SHA512 dd29ebf0aca038b6da897d8a404d3ead17004a1089b82bc6e1f0443f9840b78032773d541110b39b08d2dd45948ac6ccd39fca2b07015dfc939ac68444509bda
SSDEEP 6144:dfLBQ5nn4xmGjViGpoBJKAsZEVY1T1fn0:xMnFGjVikoBLsZkA1n
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
600a18d8f3a33835b0bffff6263886ae_JaffaCakes118

File Explorer

600a18d8f3a33835b0bffff6263886ae_JaffaCakes118

.exe 301KB

600a18d8f3a33835b0bffff6263886ae_JaffaCakes118

IMPHASH 5723d007fd3b79d5a0887de51ad72442
SHA256 a21ea821be6b36a22a8f8ea4dd5826d389d31445936581d28b17a56ccbb120a2
MD5 600a18d8f3a33835b0bffff6263886ae
SHA1 09c910376befe91f7b7e63b56ae4a31583b0be0a
SHA512 dd29ebf0aca038b6da897d8a404d3ead17004a1089b82bc6e1f0443f9840b78032773d541110b39b08d2dd45948ac6ccd39fca2b07015dfc939ac68444509bda
SSDEEP 6144:dfLBQ5nn4xmGjViGpoBJKAsZEVY1T1fn0:xMnFGjVikoBLsZkA1n
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

96272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mikave\wubecumu\zeduxulus\64\ponogamege20_dup.pdb

kernel32

GetSystemWindowsDirectoryW HeapFree CreateDirectoryW FlushViewOfFile LocalFlags GetPrivateProfileStringW GetDriveTypeA GlobalAlloc LoadLibraryW FreeConsole GetSystemWow64DirectoryW SetConsoleCursorPosition GetModuleFileNameW GetOverlappedResult lstrlenW GetStartupInfoA GetStdHandle OpenMutexW InitializeSListHead GetProcAddress SetVolumeLabelW AddAtomW PostQueuedCompletionStatus FindAtomA SetEnvironmentVariableA GetModuleFileNameA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation FreeEnvironmentStringsW GetCurrentDirectoryA OutputDebugStringA GetCPInfoExA SetProcessShutdownParameters FindAtomW CloseHandle CreateFileW GetLastError SearchPathW SetStdHandle RaiseException GetCommandLineA GetStartupInfoW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedIncrement InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapReAlloc HeapSize HeapQueryInformation RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW WriteConsoleW OutputDebugStringW IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetTitleBarInfo

advapi32

AbortSystemShutdownW

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

600a18d8f3a33835b0bffff6263886ae_JaffaCakes118

kernel32

user32

advapi32

msimg32

generic