495cc873782d89bbda1d58b8146643d2_JaffaCakes118

General

Target
495cc873782d89bbda1d58b8146643d2_JaffaCakes118
Size 770KB
Sample240331-bn5h1sbf86
SHA256 a8a0a1685c2b9f3127ca5f689b0a548ded32e5e88bb554ab86fcad9cee843d6f
MD5 495cc873782d89bbda1d58b8146643d2
SHA1 68051bc40a163c189ec963c1d830dd88a4d62795
SHA512 ae1c982b44cb3c9b41ce44a839102e920a0c32e174abebd0d91ddabf960215f245d409c05ea6bc454798223286e1c8abb0e7bde31209ad9e743321d5ae7a959b
SSDEEP 12288:u73FbGr8iOMzi396CTd1bnX2Nt8UsvLkHXp0hcLFAUy1YRYgtm:oGAszi3X1LX2Nt8U9HXShcqUbR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
495cc873782d89bbda1d58b8146643d2_JaffaCakes118

File Explorer

495cc873782d89bbda1d58b8146643d2_JaffaCakes118

.exe 770KB

495cc873782d89bbda1d58b8146643d2_JaffaCakes118

IMPHASH d8470aebc2200bafc1ff60318f406103
SHA256 a8a0a1685c2b9f3127ca5f689b0a548ded32e5e88bb554ab86fcad9cee843d6f
MD5 495cc873782d89bbda1d58b8146643d2
SHA1 68051bc40a163c189ec963c1d830dd88a4d62795
SHA512 ae1c982b44cb3c9b41ce44a839102e920a0c32e174abebd0d91ddabf960215f245d409c05ea6bc454798223286e1c8abb0e7bde31209ad9e743321d5ae7a959b
SSDEEP 12288:u73FbGr8iOMzi396CTd1bnX2Nt8UsvLkHXp0hcLFAUy1YRYgtm:oGAszi3X1LX2Nt8U9HXShcqUbR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

564368

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jiyamukuj58-dujicoyuc38\pesal\vuyudu_loc\vepeg.pdb

kernel32

FileTimeToDosDateTime DosDateTimeToFileTime CreateTimerQueue SetFilePointer GetDriveTypeW SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW FlushViewOfFile OutputDebugStringW GetModuleHandleW GetPrivateProfileStringW GetSystemWow64DirectoryA CreateActCtxW _hread VerifyVersionInfoA GetModuleFileNameW GetOverlappedResult CompareStringW lstrlenW GetStartupInfoW VerifyVersionInfoW InterlockedExchange SetCurrentDirectoryA OpenMutexW GetLastError GetCurrentDirectoryW GetProcAddress GetLongPathNameA VirtualAlloc SetVolumeLabelW WriteProfileSectionA GetConsoleDisplayMode CreateMemoryResourceNotification SearchPathA LoadLibraryA LocalAlloc SetFileApisToANSI PostQueuedCompletionStatus GetCommMask AddAtomA HeapWalk SetEnvironmentVariableA WTSGetActiveConsoleSessionId SetConsoleCursorInfo GetThreadPriority FindFirstChangeNotificationA GetProcessShutdownParameters FreeEnvironmentStringsW RequestWakeupLatency GetCPInfoExA GetVersionExA FindAtomW DeleteFileW AddConsoleAliasA CloseHandle CreateFileW SetStdHandle InterlockedIncrement InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetCommandLineA HeapSetInformation RaiseException ExitProcess WriteFile GetStdHandle IsProcessorFeaturePresent HeapValidate IsBadReadPtr InitializeCriticalSectionAndSpinCount OutputDebugStringA WriteConsoleW GetFileType LoadLibraryW QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetMessageTime DrawFrameControl

msimg32

GradientFill

Sharing

General

Malware Config

Signatures

File Explorer

495cc873782d89bbda1d58b8146643d2_JaffaCakes118

kernel32

user32

msimg32

generic