5ac515cf1fb2ab700146569f59c4e4bf_JaffaCakes118

General

Target
5ac515cf1fb2ab700146569f59c4e4bf_JaffaCakes118
Size 421KB
Sample240331-w4621agg3s
SHA256 d7e4b3b4affb5fb8b91a843bd26b2b453856641557c32ab27674af85dede2c3c
MD5 5ac515cf1fb2ab700146569f59c4e4bf
SHA1 e0cc0be1e1e9f4e8a14acecc43aeefd84631d53e
SHA512 79229706b50b725f050e7de7f95d44f61f2536097809d6088b6e86dc57e5f232af48306cc4ade4acc5c38b8bf7db0c47c652b067d72d20891363087b0a133256
SSDEEP 6144:tIAXJoFTiRL/AKU+Mwq4lk0VfDjLCwt6e0ZGOEhnCszkFmTzbhiqbof0va0:ZXJoga+84dbjew0e0zEhnCsYFohiqba
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ac515cf1fb2ab700146569f59c4e4bf_JaffaCakes118

File Explorer

5ac515cf1fb2ab700146569f59c4e4bf_JaffaCakes118

.exe 421KB

5ac515cf1fb2ab700146569f59c4e4bf_JaffaCakes118

IMPHASH 8999899787bd60b1911e458f2d25de40
SHA256 d7e4b3b4affb5fb8b91a843bd26b2b453856641557c32ab27674af85dede2c3c
MD5 5ac515cf1fb2ab700146569f59c4e4bf
SHA1 e0cc0be1e1e9f4e8a14acecc43aeefd84631d53e
SHA512 79229706b50b725f050e7de7f95d44f61f2536097809d6088b6e86dc57e5f232af48306cc4ade4acc5c38b8bf7db0c47c652b067d72d20891363087b0a133256
SSDEEP 6144:tIAXJoFTiRL/AKU+Mwq4lk0VfDjLCwt6e0ZGOEhnCszkFmTzbhiqbof0va0:ZXJoga+84dbjew0e0zEhnCsYFohiqba
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

216912

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wobazid\yohukiwuwa92 dayoxece\nuwoceciwesu\zanoz.pdb

kernel32

FindFirstChangeNotificationW SetFilePointer GetDriveTypeW GetSystemWindowsDirectoryW AddConsoleAliasW FlushViewOfFile OutputDebugStringW GetModuleHandleW GetSystemWow64DirectoryA LoadLibraryW _hread SetConsoleCursorPosition GetModuleFileNameW GetOverlappedResult lstrlenW GetStartupInfoW VerifyVersionInfoW InterlockedExchange SetCurrentDirectoryA OpenMutexW GetLastError GetCurrentDirectoryW CreateTimerQueue GetLongPathNameA SetFirmwareEnvironmentVariableW WriteProfileSectionA GetConsoleDisplayMode SearchPathA GetPrivateProfileStringA LocalAlloc PostQueuedCompletionStatus GetCommMask AddAtomA HeapWalk SetEnvironmentVariableA GetProcessShutdownParameters QueryMemoryResourceNotification FreeEnvironmentStringsW RequestWakeupLatency GetCPInfoExA FindAtomW CloseHandle CreateFileW SetStdHandle GetProcAddress SetVolumeLabelA InterlockedIncrement InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetCommandLineA HeapSetInformation RaiseException ExitProcess WriteFile GetStdHandle IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount HeapValidate IsBadReadPtr OutputDebugStringA WriteConsoleW GetFileType QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetMessageTime DrawFrameControl

advapi32

AbortSystemShutdownW

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

5ac515cf1fb2ab700146569f59c4e4bf_JaffaCakes118

kernel32

user32

advapi32

msimg32

generic