6e3c82c82fb2fcf38123d93c0d6b93b2_JaffaCakes118

General

Target
6e3c82c82fb2fcf38123d93c0d6b93b2_JaffaCakes118
Size 259KB
Sample240401-lds3caah56
SHA256 77fd63dabf73eb44f7c9830553740ea290cac78bc333322326c70b927a69d4fe
MD5 6e3c82c82fb2fcf38123d93c0d6b93b2
SHA1 df87c816ea5edb6b8c763fb133ca0e52840d944b
SHA512 3dd2b8a798dc1506ea6a44dbc620e2df93336e3fd450f5e5405c125fe0aab9ba2e2d3de4ec7ab89826f58d7c19586ace247a117e7b15c66821a66509e1aa4837
SSDEEP 6144:uceVoLVEb4uqb5iKxkMGxArlx6Q47dtsxqX7tNfVXVHQLIiu8c:uce6VEb4xNxkMEArlxyTsxwZGEX8c
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e3c82c82fb2fcf38123d93c0d6b93b2_JaffaCakes118

File Explorer

6e3c82c82fb2fcf38123d93c0d6b93b2_JaffaCakes118

.exe 259KB

6e3c82c82fb2fcf38123d93c0d6b93b2_JaffaCakes118

IMPHASH df9601abec2416ae7ecc0dd0d7272e84
SHA256 77fd63dabf73eb44f7c9830553740ea290cac78bc333322326c70b927a69d4fe
MD5 6e3c82c82fb2fcf38123d93c0d6b93b2
SHA1 df87c816ea5edb6b8c763fb133ca0e52840d944b
SHA512 3dd2b8a798dc1506ea6a44dbc620e2df93336e3fd450f5e5405c125fe0aab9ba2e2d3de4ec7ab89826f58d7c19586ace247a117e7b15c66821a66509e1aa4837
SSDEEP 6144:uceVoLVEb4uqb5iKxkMGxArlx6Q47dtsxqX7tNfVXVHQLIiu8c:uce6VEb4xNxkMEArlxyTsxwZGEX8c
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8483

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\duziwi\jogacitamade maguz_gon\74\kifukiyuy\puf\bago19_zucajuli.pdb

kernel32

EndUpdateResourceW GetEnvironmentStringsW SetEvent FlushViewOfFile ReadConsoleW GlobalAlloc Sleep InitAtomTable HeapCreate WriteConsoleW GetAtomNameW GetModuleFileNameW CreateActCtxA SetConsoleTitleA SetProcessAffinityMask DeactivateActCtx SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW LoadLibraryA SetEnvironmentVariableA GetModuleFileNameA GetOEMCP CreateIoCompletionPort GetCPInfoExA SetProcessShutdownParameters Module32Next ReleaseMutex GetVersionExA FindNextVolumeA lstrcpyW LCMapStringW SetTapePosition HeapReAlloc IsProcessorFeaturePresent RaiseException EncodePointer DecodePointer GetModuleHandleW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapAlloc ReadFile EnterCriticalSection LeaveCriticalSection HeapFree SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP IsValidCodePage CloseHandle LoadLibraryW WriteFile FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar RtlUnwind SetStdHandle FlushFileBuffers GetStringTypeW HeapSize CreateFileW

user32

ClientToScreen

gdi32

GetBitmapBits

winhttp

WinHttpQueryOption

Sharing

General

Malware Config

Signatures

File Explorer

6e3c82c82fb2fcf38123d93c0d6b93b2_JaffaCakes118

kernel32

user32

gdi32

winhttp

generic