7d35e4a38d78a4d361b51a3b3e6a6e8a_JaffaCakes118

General

Target
7d35e4a38d78a4d361b51a3b3e6a6e8a_JaffaCakes118
Size 583KB
Sample240401-3ew9tsaa5w
SHA256 665044e68300e3da42a2dbbf0a64861290e50503a47b32b11a36d7e0b3dee594
MD5 7d35e4a38d78a4d361b51a3b3e6a6e8a
SHA1 2b42aded17ecbfc832909f1a42c557258904ab37
SHA512 fcc1f0e030eaead973e600f5fd81d07d1f77178b290521b209fd3dc5b908c2075578ff9f73370f28e768e8c9ef54fa9173223dfd9176953a60b06bc78a012f59
SSDEEP 12288:9ZYwCxff3Agx1kTmGZ83uuVMnSwLayqURders2TTap3ySaNuF:9ZYwUff3omGZ83LOnjLKUgTTap6o
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d35e4a38d78a4d361b51a3b3e6a6e8a_JaffaCakes118

File Explorer

7d35e4a38d78a4d361b51a3b3e6a6e8a_JaffaCakes118

.exe 583KB

7d35e4a38d78a4d361b51a3b3e6a6e8a_JaffaCakes118

IMPHASH 33155a730e036f2480434cae8e547169
SHA256 665044e68300e3da42a2dbbf0a64861290e50503a47b32b11a36d7e0b3dee594
MD5 7d35e4a38d78a4d361b51a3b3e6a6e8a
SHA1 2b42aded17ecbfc832909f1a42c557258904ab37
SHA512 fcc1f0e030eaead973e600f5fd81d07d1f77178b290521b209fd3dc5b908c2075578ff9f73370f28e768e8c9ef54fa9173223dfd9176953a60b06bc78a012f59
SSDEEP 12288:9ZYwCxff3Agx1kTmGZ83uuVMnSwLayqURders2TTap3ySaNuF:9ZYwUff3omGZ83LOnjLKUgTTap6o
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

413184

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zoyutedujonub55-jehuru\saxiyuhajohoc\cowu.pdb

kernel32

SearchPathW InterlockedDecrement GetProcessPriorityBoost GetModuleHandleW GetTickCount IsBadReadPtr GetConsoleAliasesLengthA SetFileShortNameW CopyFileW GetSystemTimeAdjustment GetVersionExW GetModuleFileNameW GetEnvironmentVariableA ExitThread lstrlenW GetStartupInfoW GetConsoleOutputCP SetCurrentDirectoryA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA WriteProfileSectionA CreateMemoryResourceNotification GlobalGetAtomNameA _hwrite LoadLibraryA ProcessIdToSessionId OpenWaitableTimerW LocalAlloc MoveFileA GetProcessShutdownParameters FreeEnvironmentStringsW GetCurrentDirectoryA CompareStringA GetFileTime OutputDebugStringA GetWindowsDirectoryW DeleteTimerQueueTimer DeleteFileW AddConsoleAliasA CloseHandle CreateFileW WideCharToMultiByte InterlockedIncrement MultiByteToWideChar InterlockedExchange EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapValidate GetCommandLineW HeapSetInformation GetCPInfo RtlUnwind RaiseException LCMapStringW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount HeapAlloc GetModuleFileNameA GetLastError HeapReAlloc HeapSize HeapQueryInformation HeapFree HeapCreate GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType WriteFile GetStringTypeW GetLocaleInfoW WriteConsoleW OutputDebugStringW LoadLibraryW GetLocaleInfoA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers

user32

GetAncestor

Sharing

General

Malware Config

Signatures

File Explorer

7d35e4a38d78a4d361b51a3b3e6a6e8a_JaffaCakes118

kernel32

user32

generic