4c7f75dbea906c8bac51094411dd5467_JaffaCakes118

General

Target
4c7f75dbea906c8bac51094411dd5467_JaffaCakes118
Size 262KB
Sample240331-eh4ajsdd4s
SHA256 ba7495813ffeac0429b6e26659f1a6c3638f9b2e7863f4a96aa3d030ddae9b9c
MD5 4c7f75dbea906c8bac51094411dd5467
SHA1 e1b8377fb6db63cabb5f2daec730608327d8b28b
SHA512 29d48eab09cb4b101be5d388485247c81b4f95a307b4933cc75ad278f51735b90826b2c1061b80190b53d1a1f43d2c201ebcb8fa511900c8ea8a3bfb50fba614
SSDEEP 3072:d0jpv7yusHK+YMiHHtxe8S7ZyTlSdgDKbcBPU3rSe229A3N33Hg4WAtuxGtEYN+T:5HKRxS7sT8dgoUMGeh9A3RHWAwxAX9K
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c7f75dbea906c8bac51094411dd5467_JaffaCakes118

File Explorer

4c7f75dbea906c8bac51094411dd5467_JaffaCakes118

.exe 262KB

4c7f75dbea906c8bac51094411dd5467_JaffaCakes118

IMPHASH b2b1ce057c4a3ad8c1ee685e46521866
SHA256 ba7495813ffeac0429b6e26659f1a6c3638f9b2e7863f4a96aa3d030ddae9b9c
MD5 4c7f75dbea906c8bac51094411dd5467
SHA1 e1b8377fb6db63cabb5f2daec730608327d8b28b
SHA512 29d48eab09cb4b101be5d388485247c81b4f95a307b4933cc75ad278f51735b90826b2c1061b80190b53d1a1f43d2c201ebcb8fa511900c8ea8a3bfb50fba614
SSDEEP 3072:d0jpv7yusHK+YMiHHtxe8S7ZyTlSdgDKbcBPU3rSe229A3N33Hg4WAtuxGtEYN+T:5HKRxS7sT8dgoUMGeh9A3RHWAwxAX9K
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

98288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zegosudoruxo\likuzeh-bufewotu_nom\tefupajuv\ximivo.pdb

kernel32

InterlockedDecrement FindFirstFileExW OutputDebugStringW GetModuleHandleW GetTickCount IsBadReadPtr GetConsoleAliasesLengthA GlobalAlloc SetFileShortNameW TerminateThread GetVersionExW LocalHandle GetModuleFileNameW GetEnvironmentVariableA ExitThread lstrlenW GetStartupInfoW GetConsoleOutputCP SetCurrentDirectoryA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA MoveFileW WriteProfileSectionA CopyFileA GlobalGetAtomNameA SearchPathA OpenWaitableTimerA LoadLibraryA ProcessIdToSessionId OpenWaitableTimerW WriteProfileSectionW GetOEMCP GetProcessShutdownParameters FreeEnvironmentStringsW CompareStringA GetFileTime GetWindowsDirectoryW DeleteTimerQueueTimer DeleteFileW AddConsoleAliasA CloseHandle CreateFileW GetCommandLineW HeapSetInformation SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedIncrement DecodePointer ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetLastError HeapCreate WriteFile GetACP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW OutputDebugStringA WriteConsoleW IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode RaiseException SetStdHandle FlushFileBuffers

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

4c7f75dbea906c8bac51094411dd5467_JaffaCakes118

kernel32

user32

generic