574ae27407a29872371c16b4d51fc07c_JaffaCakes118

General

Target
574ae27407a29872371c16b4d51fc07c_JaffaCakes118
Size 12.6MB
Sample240331-r4lnvaec43
SHA256 7567845d1f6798d471c6d9ea479b6c7c1a59540e3e6dbf150b3624cb0afc1caa
MD5 574ae27407a29872371c16b4d51fc07c
SHA1 d4c6d82d9c55553c8d855fea370c69d7c8163f36
SHA512 4cfc537197aa4a682470792902f3dc72f5d8a51d2ae49386e9acab34b93e16ad50932c22fd0616ff1bad8740102bf93922bda4c157afd39e3ca44a2230ec9129
SSDEEP 12288:zZuQ8KeZy8QXVeciP1m11111111111111111111111111111111111111111111n:z0Q8wVPk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
574ae27407a29872371c16b4d51fc07c_JaffaCakes118

File Explorer

574ae27407a29872371c16b4d51fc07c_JaffaCakes118

.exe 12.6MB

574ae27407a29872371c16b4d51fc07c_JaffaCakes118

IMPHASH 42558e76cb0191e50d5255e5f863e8b9
SHA256 7567845d1f6798d471c6d9ea479b6c7c1a59540e3e6dbf150b3624cb0afc1caa
MD5 574ae27407a29872371c16b4d51fc07c
SHA1 d4c6d82d9c55553c8d855fea370c69d7c8163f36
SHA512 4cfc537197aa4a682470792902f3dc72f5d8a51d2ae49386e9acab34b93e16ad50932c22fd0616ff1bad8740102bf93922bda4c157afd39e3ca44a2230ec9129
SSDEEP 12288:zZuQ8KeZy8QXVeciP1m11111111111111111111111111111111111111111111n:z0Q8wVPk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tawafurowik\dajasuc\ruc.pdb

kernel32

GetCommandLineW GetThreadContext UnregisterWait DosDateTimeToFileTime FindFirstChangeNotificationW CopyFileExW CallNamedPipeA HeapAlloc SetWaitableTimer InterlockedIncrement InterlockedDecrement GetProfileStringW FreeEnvironmentStringsA CreateNamedPipeW LocalFlags SetCommState SetProcessPriorityBoost GetSystemTimes ActivateActCtx GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW GetVolumeInformationA LoadLibraryW TerminateThread LeaveCriticalSection VerifyVersionInfoA FileTimeToSystemTime IsDBCSLeadByte GetCompressedFileSizeA lstrlenW LCMapStringA InterlockedExchange GetStartupInfoA SetThreadLocale GetCPInfoExW GetLastError GetCurrentDirectoryW SetLastError GetProcAddress SetStdHandle DisableThreadLibraryCalls LoadLibraryA WritePrivateProfileStringA FindAtomA GetModuleFileNameA GetThreadPriority CreateIoCompletionPort GetModuleHandleA HeapSetInformation FindNextFileW WriteProfileStringW GetCurrentThreadId TlsAlloc LocalSize EnumResourceLanguagesW SetFileValidData GetSystemTime GetProfileSectionW GetStartupInfoW HeapValidate IsBadReadPtr RaiseException EnterCriticalSection GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode GetModuleHandleW Sleep ExitProcess TlsGetValue TlsSetValue TlsFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetFilePointer GetStringTypeA GetStringTypeW GetLocaleInfoA DebugBreak OutputDebugStringA OutputDebugStringW LCMapStringW CreateFileA CloseHandle FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

574ae27407a29872371c16b4d51fc07c_JaffaCakes118

kernel32

generic