5bdc0766d86a74e58055a3940a27feca_JaffaCakes118

General

Target
5bdc0766d86a74e58055a3940a27feca_JaffaCakes118
Size 560KB
Sample240331-x2fmpsad29
SHA256 55927123aaddfc0c7d7b720e0f06aadd5bcc52d9b4955da3460b02561fb6447d
MD5 5bdc0766d86a74e58055a3940a27feca
SHA1 efa03d9af76c4cc13fac9dfeaa173e662beca5d5
SHA512 bd62121c5162ae11001d8200f7100d5eb734d69b3205adad73a7b19e96864194d4e9c385e0d97c5b22d6474b6febdee2857f9dc7c880b793a91b0c15aa33cded
SSDEEP 12288:UhHQ0DdmGYArMz3+kGNtbLlZB+xCmNrCZ:GHpdYAQz3+kGNDixTO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bdc0766d86a74e58055a3940a27feca_JaffaCakes118

File Explorer

5bdc0766d86a74e58055a3940a27feca_JaffaCakes118

.exe 560KB

5bdc0766d86a74e58055a3940a27feca_JaffaCakes118

IMPHASH e9d1f1739ab48fbfe7c7128688524302
SHA256 55927123aaddfc0c7d7b720e0f06aadd5bcc52d9b4955da3460b02561fb6447d
MD5 5bdc0766d86a74e58055a3940a27feca
SHA1 efa03d9af76c4cc13fac9dfeaa173e662beca5d5
SHA512 bd62121c5162ae11001d8200f7100d5eb734d69b3205adad73a7b19e96864194d4e9c385e0d97c5b22d6474b6febdee2857f9dc7c880b793a91b0c15aa33cded
SSDEEP 12288:UhHQ0DdmGYArMz3+kGNtbLlZB+xCmNrCZ:GHpdYAQz3+kGNDixTO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

372400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kopus.pdb

kernel32

GetEnvironmentVariableW FileTimeToDosDateTime CreateTimerQueue SearchPathW GetDriveTypeW InterlockedDecrement GetSystemWindowsDirectoryW AddConsoleAliasW FlushViewOfFile FreeEnvironmentStringsA OutputDebugStringW GetModuleHandleW CreateActCtxW GlobalAlloc LoadLibraryW GetCalendarInfoA GetSystemWow64DirectoryW SetSystemTimeAdjustment GetVersionExW VerifyVersionInfoA GetModuleFileNameW CompareStringW lstrlenW SetThreadPriority GetStartupInfoW OpenMutexW IsDBCSLeadByteEx GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress SetVolumeLabelW WriteProfileSectionA GetConsoleDisplayMode SearchPathA GetPrivateProfileStringA _hwrite RegisterWaitForSingleObject AddAtomW SetCurrentDirectoryW SetFileApisToANSI AddAtomA HeapWalk GetModuleFileNameA WTSGetActiveConsoleSessionId CreateIoCompletionPort QueryMemoryResourceNotification FreeEnvironmentStringsW RequestWakeupLatency FillConsoleOutputAttribute VirtualProtect GetCPInfoExA SetProcessShutdownParameters GetVersionExA DeleteFileW CloseHandle CreateFileW InterlockedIncrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetCommandLineW HeapSetInformation RaiseException ExitProcess GetLastError WriteFile GetStdHandle IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount HeapValidate IsBadReadPtr OutputDebugStringA WriteConsoleW GetFileType QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount TlsAlloc TlsGetValue TlsSetValue TlsFree HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind MultiByteToWideChar WideCharToMultiByte LCMapStringW GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers

user32

GetMessageTime

Sharing

General

Malware Config

Signatures

File Explorer

5bdc0766d86a74e58055a3940a27feca_JaffaCakes118

kernel32

user32

generic