615ed353f7a18d3394a9867dffacccd0_JaffaCakes118

General

Target
615ed353f7a18d3394a9867dffacccd0_JaffaCakes118
Size 12.1MB
Sample240331-3mw9ssfd5z
SHA256 ce703770a7f080de1de305d8834cd5f57fd3d81877f231a97dc450386c2fc2bf
MD5 615ed353f7a18d3394a9867dffacccd0
SHA1 f193396443674234d42b5c07bfb182aada642b32
SHA512 094090f52ed9c1bdc9ce8b6aa60a32551ceee78d6a4a63dc03d15fc1afcb17b10221022a28dd8e7a6fc16486785980521c71385a2c474b0614886c6c4db610c9
SSDEEP 12288:RUR4+0lGrUPDHQahTzrdCcrFy55555555555555555555555555555555555555p:Rl+PrmrXrd1p
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
615ed353f7a18d3394a9867dffacccd0_JaffaCakes118

File Explorer

615ed353f7a18d3394a9867dffacccd0_JaffaCakes118

.exe 12.1MB

615ed353f7a18d3394a9867dffacccd0_JaffaCakes118

IMPHASH d0a8c3f24685503ba25bd76f34c13b9e
SHA256 ce703770a7f080de1de305d8834cd5f57fd3d81877f231a97dc450386c2fc2bf
MD5 615ed353f7a18d3394a9867dffacccd0
SHA1 f193396443674234d42b5c07bfb182aada642b32
SHA512 094090f52ed9c1bdc9ce8b6aa60a32551ceee78d6a4a63dc03d15fc1afcb17b10221022a28dd8e7a6fc16486785980521c71385a2c474b0614886c6c4db610c9
SSDEEP 12288:RUR4+0lGrUPDHQahTzrdCcrFy55555555555555555555555555555555555555p:Rl+PrmrXrd1p
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6816

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gex15\soho-barot_fi.pdb

kernel32

CallNamedPipeA SetWaitableTimer InterlockedIncrement GetQueuedCompletionStatus GetCommState InterlockedDecrement SetEvent FreeEnvironmentStringsA CreateNamedPipeW GetNumberFormatA ReadConsoleOutputA GetCommandLineA SetProcessPriorityBoost GetSystemTimes GetPrivateProfileIntA GetSystemDirectoryW GetConsoleAliasExesLengthW HeapCreate TerminateProcess FileTimeToSystemTime EnumResourceLanguagesA GetModuleFileNameW GetCompressedFileSizeA lstrlenW GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetCPInfoExW CopyFileExW GetLastError GetCurrentDirectoryW GetThreadLocale GetProcAddress SetStdHandle EnterCriticalSection LoadLibraryA OpenMutexA CreateSemaphoreW LocalAlloc WritePrivateProfileStringA GetProfileStringA HeapWalk FindAtomA GetModuleHandleA FindFirstChangeNotificationA FreeEnvironmentStringsW FindNextFileW WriteProfileStringW SetFileShortNameA TlsAlloc LocalSize FindAtomW DeleteFileW GetSystemTime LCMapStringW CopyFileExA GetVolumeInformationW FreeLibraryAndExitThread SetThreadContext MoveFileA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter SetHandleCount GetStdHandle GetFileType GetCurrentProcess IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

advapi32

InitiateSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

615ed353f7a18d3394a9867dffacccd0_JaffaCakes118

kernel32

advapi32

generic