57093deb4af9d588900f67fc2e2d677e_JaffaCakes118

General

Target
57093deb4af9d588900f67fc2e2d677e_JaffaCakes118
Size 12.1MB
Sample240331-rvwgpaea87
SHA256 e22cebdc511361af6279b3d257d5ca3c69fdd3b799f193fe3fdd8f9eeb303573
MD5 57093deb4af9d588900f67fc2e2d677e
SHA1 a83d4ced5a0d5fa7e4f1748bd1f8a9c9105bcdac
SHA512 da85cff41991841286401dcac9341db0740304c6d4421b5246160a1075b084c305f0069b05fd5e2dd85952de0382118857bad2fe473c95c4553761f7c504756d
SSDEEP 6144:/uumRZNKfLWUAUx6z6z1PiK/GasVhMz/bY:GbUR6z6zHGasVhU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57093deb4af9d588900f67fc2e2d677e_JaffaCakes118

File Explorer

57093deb4af9d588900f67fc2e2d677e_JaffaCakes118

.exe 12.1MB

57093deb4af9d588900f67fc2e2d677e_JaffaCakes118

IMPHASH baf5c2110fa8a268441421686d4e3331
SHA256 e22cebdc511361af6279b3d257d5ca3c69fdd3b799f193fe3fdd8f9eeb303573
MD5 57093deb4af9d588900f67fc2e2d677e
SHA1 a83d4ced5a0d5fa7e4f1748bd1f8a9c9105bcdac
SHA512 da85cff41991841286401dcac9341db0740304c6d4421b5246160a1075b084c305f0069b05fd5e2dd85952de0382118857bad2fe473c95c4553761f7c504756d
SSDEEP 6144:/uumRZNKfLWUAUx6z6z1PiK/GasVhMz/bY:GbUR6z6zHGasVhU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

99376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kazeju14\zuvesexet\nanimoyiha\nilayabuwa2\cutubejetim84 naler.pdb

kernel32

ExitProcess CreateTimerQueue SearchPathW InterlockedIncrement GetProcessPriorityBoost GetTickCount GenerateConsoleCtrlEvent IsBadReadPtr GetConsoleAliasesLengthA CreateActCtxW GlobalAlloc SetFileShortNameW GetSystemTimeAdjustment GetVersionExW GetModuleFileNameW GetEnvironmentVariableA lstrlenW GetStartupInfoW FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA CopyFileA CreateMemoryResourceNotification _hwrite OpenWaitableTimerA OpenMutexA ProcessIdToSessionId RegisterWaitForSingleObject OpenWaitableTimerW MoveFileA SetConsoleOutputCP SetCurrentDirectoryW WriteProfileSectionW AddAtomA GetModuleHandleA GetProcessShutdownParameters FreeEnvironmentStringsW GetCurrentDirectoryA CompareStringA GetFileTime OutputDebugStringA GetVersionExA GetWindowsDirectoryW DeleteTimerQueueTimer AddConsoleAliasA DeleteFileA CloseHandle CreateFileW SetStdHandle RaiseException GetCommandLineW HeapSetInformation DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer InterlockedDecrement GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW GetLastError QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate HeapCreate WriteFile GetStringTypeW MultiByteToWideChar EnterCriticalSection LeaveCriticalSection WriteConsoleW OutputDebugStringW LoadLibraryW RtlUnwind WideCharToMultiByte LCMapStringW HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetComboBoxInfo

winhttp

WinHttpQueryOption

Sharing

General

Malware Config

Signatures

File Explorer

57093deb4af9d588900f67fc2e2d677e_JaffaCakes118

kernel32

user32

winhttp

generic