853bc55f40fce72bc106afcecec813ed_JaffaCakes118

General

Target
853bc55f40fce72bc106afcecec813ed_JaffaCakes118
Size 11.7MB
Sample240402-gepn4aad87
SHA256 f7e835897ed3701bdfdb7f8284786bdd12b11ba1090088806717b7a1490fdb7d
MD5 853bc55f40fce72bc106afcecec813ed
SHA1 4140b06fa9af6caca5f8b5f357ac16922f256121
SHA512 d726533601245163c0a73a6bb75ef9e12feeb4d33e54021a188c5f56ca217f6d0368ea1f866cb1be491bbc9c1450de663437fe3c4593018dfb4001c01e312536
SSDEEP 12288:Z/1FGiuyrsP8dV3pUkzFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFl:Z/GUrlZUk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
853bc55f40fce72bc106afcecec813ed_JaffaCakes118

File Explorer

853bc55f40fce72bc106afcecec813ed_JaffaCakes118

.exe 11.7MB

853bc55f40fce72bc106afcecec813ed_JaffaCakes118

IMPHASH d0a8c3f24685503ba25bd76f34c13b9e
SHA256 f7e835897ed3701bdfdb7f8284786bdd12b11ba1090088806717b7a1490fdb7d
MD5 853bc55f40fce72bc106afcecec813ed
SHA1 4140b06fa9af6caca5f8b5f357ac16922f256121
SHA512 d726533601245163c0a73a6bb75ef9e12feeb4d33e54021a188c5f56ca217f6d0368ea1f866cb1be491bbc9c1450de663437fe3c4593018dfb4001c01e312536
SSDEEP 12288:Z/1FGiuyrsP8dV3pUkzFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFl:Z/GUrlZUk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6816

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jeror\sefegecohuva\fapasad-54_disi.pdb

kernel32

CallNamedPipeA SetWaitableTimer InterlockedIncrement GetQueuedCompletionStatus GetCommState InterlockedDecrement SetEvent FreeEnvironmentStringsA CreateNamedPipeW GetNumberFormatA ReadConsoleOutputA GetCommandLineA SetProcessPriorityBoost GetSystemTimes GetPrivateProfileIntA GetSystemDirectoryW GetConsoleAliasExesLengthW HeapCreate TerminateProcess FileTimeToSystemTime EnumResourceLanguagesA GetModuleFileNameW GetCompressedFileSizeA lstrlenW GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetCPInfoExW CopyFileExW GetLastError GetCurrentDirectoryW GetThreadLocale GetProcAddress SetStdHandle EnterCriticalSection LoadLibraryA OpenMutexA CreateSemaphoreW LocalAlloc WritePrivateProfileStringA GetProfileStringA HeapWalk FindAtomA GetModuleHandleA FindFirstChangeNotificationA FreeEnvironmentStringsW FindNextFileW WriteProfileStringW SetFileShortNameA TlsAlloc LocalSize FindAtomW DeleteFileW GetSystemTime LCMapStringW CopyFileExA GetVolumeInformationW FreeLibraryAndExitThread SetThreadContext MoveFileA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter SetHandleCount GetStdHandle GetFileType GetCurrentProcess IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

advapi32

InitiateSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

853bc55f40fce72bc106afcecec813ed_JaffaCakes118

kernel32

advapi32

generic