76d7015ee5908cf7eae9a864680f479f_JaffaCakes118

General

Target
76d7015ee5908cf7eae9a864680f479f_JaffaCakes118
Size 572KB
Sample240401-wqa3eabb7s
SHA256 c0612b6bbada59f17891c503ed8c50b09933e7a2c37ffb05bf8de5003e3457ce
MD5 76d7015ee5908cf7eae9a864680f479f
SHA1 8fe450b1cb9e9e45a841f546c45f3a2f0b1387b2
SHA512 966d2c361b6ca6309109ace5f2595621ea5088d207ffb1aa0ee2e5af4c33725123cdab4fcd9f7b51bfaed3fc897d185980c694652c244031e5cb29d8925afdfd
SSDEEP 12288:zrre5uBBa/wOvEktXtyug8HYW6avKnPbtUVArhOCTDswV:D+F7vEurHYW6avkPbgAECT1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76d7015ee5908cf7eae9a864680f479f_JaffaCakes118

File Explorer

76d7015ee5908cf7eae9a864680f479f_JaffaCakes118

.exe 572KB

76d7015ee5908cf7eae9a864680f479f_JaffaCakes118

IMPHASH d65c67dd6f4a95898a66b39f504dd200
SHA256 c0612b6bbada59f17891c503ed8c50b09933e7a2c37ffb05bf8de5003e3457ce
MD5 76d7015ee5908cf7eae9a864680f479f
SHA1 8fe450b1cb9e9e45a841f546c45f3a2f0b1387b2
SHA512 966d2c361b6ca6309109ace5f2595621ea5088d207ffb1aa0ee2e5af4c33725123cdab4fcd9f7b51bfaed3fc897d185980c694652c244031e5cb29d8925afdfd
SSDEEP 12288:zrre5uBBa/wOvEktXtyug8HYW6avKnPbtUVArhOCTDswV:D+F7vEurHYW6avkPbgAECT1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

371824

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\locesofofug\zeka-83\natakel wajuriti bi.pdb

kernel32

FindFirstChangeNotificationW SetFilePointer GetDriveTypeW AddConsoleAliasW FlushViewOfFile OutputDebugStringW GetModuleHandleW GetSystemWow64DirectoryA _hread GetSystemWindowsDirectoryA SetConsoleCursorPosition GetModuleFileNameW GetOverlappedResult lstrlenW GetStartupInfoW VerifyVersionInfoW InterlockedExchange SetCurrentDirectoryA OpenMutexW GetLastError GetCurrentDirectoryW GetProcAddress CreateTimerQueue SetFirmwareEnvironmentVariableW WriteProfileSectionA GetConsoleDisplayMode SearchPathA GetPrivateProfileStringA LoadLibraryA LocalAlloc PostQueuedCompletionStatus GetCommMask AddAtomA HeapWalk SetEnvironmentVariableA GetProcessShutdownParameters QueryMemoryResourceNotification FreeEnvironmentStringsW RequestWakeupLatency GetCPInfoExA FindAtomW CloseHandle CreateFileW SetStdHandle GetLongPathNameA SetVolumeLabelA InterlockedIncrement InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetCommandLineA HeapSetInformation RaiseException ExitProcess WriteFile GetStdHandle IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount HeapValidate IsBadReadPtr OutputDebugStringA WriteConsoleW GetFileType LoadLibraryW QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetMessageTime DrawFrameControl

advapi32

AbortSystemShutdownW

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

76d7015ee5908cf7eae9a864680f479f_JaffaCakes118

kernel32

user32

advapi32

msimg32

generic