59ff7d1e5dc67270e6a629fc87da34ba_JaffaCakes118

General

Target
59ff7d1e5dc67270e6a629fc87da34ba_JaffaCakes118
Size 562KB
Sample240331-wkllysgh26
SHA256 2e3feb8726d2fa679dd5958baacd7251ada0605bb3a7884aff2f564a8e8ed352
MD5 59ff7d1e5dc67270e6a629fc87da34ba
SHA1 525c41353cc2f5706fabe834475efb6227c6851b
SHA512 11845b7e59595f635cd2dce4c04b69b177405403ac66c20668894dd09978858ac9c88dbb14282b5d3f31c8e78d1384f8be41b51de6c968d0b8f47c6a8b562c7a
SSDEEP 12288:NmywsrYuTY4TIYm7gPwI7IpnQzAw298ONmvEFe8KHOx5:AyxYEIYJPd7qQzO6ONxA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59ff7d1e5dc67270e6a629fc87da34ba_JaffaCakes118

File Explorer

59ff7d1e5dc67270e6a629fc87da34ba_JaffaCakes118

.exe 562KB

59ff7d1e5dc67270e6a629fc87da34ba_JaffaCakes118

IMPHASH 4b52e566ef5b8727d87906b4623fc7d4
SHA256 2e3feb8726d2fa679dd5958baacd7251ada0605bb3a7884aff2f564a8e8ed352
MD5 59ff7d1e5dc67270e6a629fc87da34ba
SHA1 525c41353cc2f5706fabe834475efb6227c6851b
SHA512 11845b7e59595f635cd2dce4c04b69b177405403ac66c20668894dd09978858ac9c88dbb14282b5d3f31c8e78d1384f8be41b51de6c968d0b8f47c6a8b562c7a
SSDEEP 12288:NmywsrYuTY4TIYm7gPwI7IpnQzAw298ONmvEFe8KHOx5:AyxYEIYJPd7qQzO6ONxA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

373600

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cek gunoxerapilet-kuhoweci95_tacir\hipaliseler-13.pdb

kernel32

InterlockedDecrement CompareFileTime AddConsoleAliasW FlushViewOfFile CreateActCtxW GetSystemTimes GetDriveTypeA GlobalAlloc LoadLibraryW _hread GetCalendarInfoW GetSystemWow64DirectoryW SetSystemTimeAdjustment GetSystemWindowsDirectoryA GetVersionExW VerifyVersionInfoA GetModuleFileNameW GetEnvironmentVariableA lstrlenW SetThreadPriority GetStartupInfoA GetCPInfoExW OpenMutexW IsDBCSLeadByteEx GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress SetVolumeLabelW CreateTimerQueueTimer WriteProfileSectionA GetConsoleDisplayMode SearchPathA GetPrivateProfileStringA ProcessIdToSessionId RegisterWaitForSingleObject IsSystemResumeAutomatic AddAtomW SetCurrentDirectoryW SetFileApisToANSI HeapWalk GetModuleFileNameA CreateIoCompletionPort GetModuleHandleA QueryMemoryResourceNotification FreeEnvironmentStringsW FillConsoleOutputAttribute VirtualProtect CompareStringA OutputDebugStringA SetProcessShutdownParameters GetVersionExA DeleteFileW CloseHandle CreateFileW InterlockedIncrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException GetModuleHandleW ExitProcess GetLastError WriteFile GetStdHandle IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount HeapValidate IsBadReadPtr TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree WriteConsoleW GetFileType OutputDebugStringW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetEnvironmentStringsW SetHandleCount HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree MultiByteToWideChar LCMapStringW GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers

user32

GetMessageTime

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

59ff7d1e5dc67270e6a629fc87da34ba_JaffaCakes118

kernel32

user32

generic