583f7daeb71897f7b1af1f5592b0f409_JaffaCakes118

General

Target
583f7daeb71897f7b1af1f5592b0f409_JaffaCakes118
Size 11.5MB
Sample240331-trnnsaef7y
SHA256 2ba091fbd479ba0371e00c7339034c2473d4e6f6e6ab0fab9e558cedfa763f12
MD5 583f7daeb71897f7b1af1f5592b0f409
SHA1 74edf8b9daed112da262fd30e25a17debcbf155d
SHA512 4a5d99c8e8a6b7e45216841d91f92976412c9fbb602f14ed0089aab43d023b1fe1ff791ca40d1ca4aa54b186ffd265ec0a7d49aaf5cbfdf74c74f800a3811069
SSDEEP 49152:xIghhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh:m
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
583f7daeb71897f7b1af1f5592b0f409_JaffaCakes118

File Explorer

583f7daeb71897f7b1af1f5592b0f409_JaffaCakes118

.exe 11.5MB

583f7daeb71897f7b1af1f5592b0f409_JaffaCakes118

IMPHASH 1435fac27cb0e146b6806556c822ef8f
SHA256 2ba091fbd479ba0371e00c7339034c2473d4e6f6e6ab0fab9e558cedfa763f12
MD5 583f7daeb71897f7b1af1f5592b0f409
SHA1 74edf8b9daed112da262fd30e25a17debcbf155d
SHA512 4a5d99c8e8a6b7e45216841d91f92976412c9fbb602f14ed0089aab43d023b1fe1ff791ca40d1ca4aa54b186ffd265ec0a7d49aaf5cbfdf74c74f800a3811069
SSDEEP 49152:xIghhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh:m
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jarapusawofize\90.pdb

kernel32

FreeLibrary InterlockedIncrement GetCommState GetProfileStringW UnlockFile CallNamedPipeW FreeEnvironmentStringsA GetNumberFormatA GetCommandLineA FindResourceExA GlobalAlloc GetSystemWow64DirectoryW GetSystemWindowsDirectoryA HeapDestroy GetModuleFileNameW GetCompressedFileSizeA GetSystemDirectoryA CreateActCtxA GetBinaryTypeW WritePrivateProfileStringW LCMapStringA GetPrivateProfileIntW CopyFileExW SetThreadLocale GetStdHandle GetCPInfoExW GetLastError SetLastError GetProcAddress CreateNamedPipeA EnterCriticalSection LoadLibraryA OpenMutexA SetSystemTime CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation FindNextFileW GetCurrentDirectoryA SetFileShortNameA FindAtomW UnregisterWaitEx DeleteFileA GetVolumeInformationW lstrlenA GetStartupInfoA GetThreadContext CloseHandle CreateFileW WideCharToMultiByte EncodePointer DecodePointer GetStartupInfoW InterlockedDecrement GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree HeapValidate IsBadReadPtr QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate LeaveCriticalSection LoadLibraryW IsProcessorFeaturePresent OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree SetFilePointer GetConsoleCP GetConsoleMode RaiseException SetStdHandle FlushFileBuffers

advapi32

InitiateSystemShutdownA AbortSystemShutdownA

winhttp

WinHttpOpen

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

583f7daeb71897f7b1af1f5592b0f409_JaffaCakes118

kernel32

advapi32

winhttp

generic