5c3763d2572f5772f1a13a4bc592b44e_JaffaCakes118

General

Target
5c3763d2572f5772f1a13a4bc592b44e_JaffaCakes118
Size 551KB
Sample240331-yaglcsaf78
SHA256 5af7521fb73a917f9bccb36e23d89965998663e8297ef5d8b178dd7913fc145d
MD5 5c3763d2572f5772f1a13a4bc592b44e
SHA1 b4656036a9099771eb12556b3e3b0576b462d9c7
SHA512 be9e56d45174019f21b703b5463a7eeafc3c70bc252576c68b3c521aec5fd73f3f8f0d6b148930ee9e351bd2455b4dda6078fc9f3aa0912bccf8ae76a04cef2d
SSDEEP 12288:hsIoWytJJcIkqX+Vrqu47cQz00gwGPMdsHni6AQvwW/nS/6AHpr:hsWYXNiZ54sC1hgSSWp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c3763d2572f5772f1a13a4bc592b44e_JaffaCakes118

File Explorer

5c3763d2572f5772f1a13a4bc592b44e_JaffaCakes118

.exe 551KB

5c3763d2572f5772f1a13a4bc592b44e_JaffaCakes118

IMPHASH 225e0ad40cbe89f68a30c3a6a7705729
SHA256 5af7521fb73a917f9bccb36e23d89965998663e8297ef5d8b178dd7913fc145d
MD5 5c3763d2572f5772f1a13a4bc592b44e
SHA1 b4656036a9099771eb12556b3e3b0576b462d9c7
SHA512 be9e56d45174019f21b703b5463a7eeafc3c70bc252576c68b3c521aec5fd73f3f8f0d6b148930ee9e351bd2455b4dda6078fc9f3aa0912bccf8ae76a04cef2d
SSDEEP 12288:hsIoWytJJcIkqX+Vrqu47cQz00gwGPMdsHni6AQvwW/nS/6AHpr:hsWYXNiZ54sC1hgSSWp
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

354304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hamoyubi xemomeje\wajezo.pdb

kernel32

ExitProcess InterlockedDecrement FindFirstFileExW OutputDebugStringW GetModuleHandleW GetTickCount GetConsoleAliasesLengthA SetFileTime LoadLibraryW TerminateThread GetVersionExW IsBadWritePtr LocalHandle GetModuleFileNameW GetEnvironmentVariableA lstrlenW GetConsoleOutputCP SetCurrentDirectoryA GetStartupInfoA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA MoveFileW WriteProfileSectionA CopyFileA GlobalGetAtomNameA SearchPathA OpenWaitableTimerA ProcessIdToSessionId OpenWaitableTimerW LocalAlloc WriteProfileSectionW GetModuleFileNameA GetOEMCP FreeEnvironmentStringsW CompareStringA SetProcessShutdownParameters SetFileShortNameA GetVersionExA GetWindowsDirectoryW DeleteTimerQueueTimer DeleteFileW AddConsoleAliasA CreateFileW GetCommandLineW HeapSetInformation GetStartupInfoW EnterCriticalSection LeaveCriticalSection DecodePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedIncrement GetEnvironmentStringsW HeapValidate IsBadReadPtr TlsAlloc TlsGetValue TlsSetValue TlsFree GetLastError HeapCreate WriteFile WideCharToMultiByte GetACP GetCPInfo IsValidCodePage OutputDebugStringA WriteConsoleW RtlUnwind HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree FlushFileBuffers GetConsoleCP GetConsoleMode GetStringTypeW LCMapStringW MultiByteToWideChar SetFilePointer IsProcessorFeaturePresent CloseHandle SetStdHandle RaiseException

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

5c3763d2572f5772f1a13a4bc592b44e_JaffaCakes118

kernel32

user32

generic