83f6dcaa60186aff731de68b7a46a3e1_JaffaCakes118

General

Target
83f6dcaa60186aff731de68b7a46a3e1_JaffaCakes118
Size 1.2MB
Sample240402-fdhzgshe82
SHA256 05bcb94a9cd1f7d16b49301ee937748fb6d5b31167e9aa9d537263ceef63427a
MD5 83f6dcaa60186aff731de68b7a46a3e1
SHA1 ea69de0bba9c6c82dcb1308599b40d5d9998b97a
SHA512 2d9a3c2b2b94e462fde249a19b429ea5b5ff652f4a93d3883b3a72d6418e9ded2be1ca8c65bc50dde430ae6efd7db1721f42b595103e9e86f08b70dffc534f73
SSDEEP 24576:0yaD2XP7TgKcCo9Rzd3yHgRU9/ZqQZ7HpMpttUOI:QKcCo9dpyHR9/EQVqpt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83f6dcaa60186aff731de68b7a46a3e1_JaffaCakes118

File Explorer

83f6dcaa60186aff731de68b7a46a3e1_JaffaCakes118

.exe 1.2MB

83f6dcaa60186aff731de68b7a46a3e1_JaffaCakes118

IMPHASH f9ea7fd19aba2d67c1ba609de266a8db
SHA256 05bcb94a9cd1f7d16b49301ee937748fb6d5b31167e9aa9d537263ceef63427a
MD5 83f6dcaa60186aff731de68b7a46a3e1
SHA1 ea69de0bba9c6c82dcb1308599b40d5d9998b97a
SHA512 2d9a3c2b2b94e462fde249a19b429ea5b5ff652f4a93d3883b3a72d6418e9ded2be1ca8c65bc50dde430ae6efd7db1721f42b595103e9e86f08b70dffc534f73
SSDEEP 24576:0yaD2XP7TgKcCo9Rzd3yHgRU9/ZqQZ7HpMpttUOI:QKcCo9dpyHR9/EQVqpt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

1032144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pawitetobefe 4\vosoruyosa\favulimakofov\siy-66_wu.pdb

kernel32

FileTimeToDosDateTime DosDateTimeToFileTime CreateTimerQueue FindFirstChangeNotificationW SetFilePointer SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW FlushViewOfFile FreeEnvironmentStringsA OutputDebugStringW GetModuleHandleW GetPrivateProfileStringW GetSystemWow64DirectoryA CreateActCtxW GetDriveTypeA _hread GetVersionExW VerifyVersionInfoA GetModuleFileNameW GetOverlappedResult CompareStringW lstrlenW GetStartupInfoW InterlockedExchange SetCurrentDirectoryA GetLastError IsDBCSLeadByteEx GetCurrentDirectoryW GetProcAddress GetLongPathNameA VirtualAlloc SetVolumeLabelW GetConsoleDisplayMode CreateMemoryResourceNotification SearchPathA LoadLibraryA OpenMutexA LocalAlloc SetFileApisToANSI WriteProfileSectionW AddAtomA HeapWalk FindAtomA SetEnvironmentVariableA WTSGetActiveConsoleSessionId SetConsoleCursorInfo GetThreadPriority GetProcessShutdownParameters FreeEnvironmentStringsW RequestWakeupLatency GetCPInfoExA GetVersionExA DeleteFileW AddConsoleAliasA CloseHandle CreateFileW SetStdHandle InterlockedIncrement InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetCommandLineA HeapSetInformation RaiseException ExitProcess WriteFile GetStdHandle IsProcessorFeaturePresent HeapValidate IsBadReadPtr InitializeCriticalSectionAndSpinCount OutputDebugStringA WriteConsoleW GetFileType LoadLibraryW QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetMessageTime DrawFrameControl

msimg32

GradientFill

Sharing

General

Malware Config

Signatures

File Explorer

83f6dcaa60186aff731de68b7a46a3e1_JaffaCakes118

kernel32

user32

msimg32

generic