8736aee0094e4ec06031672595563f43_JaffaCakes118

General

Target
8736aee0094e4ec06031672595563f43_JaffaCakes118
Size 566KB
Sample240402-j34t2aca93
SHA256 1e74390fbc3bd943d4faf6c188d4ad05923739643d7f7ca67ba5668f2d2dc352
MD5 8736aee0094e4ec06031672595563f43
SHA1 d9bcaf7da0d47e66165fb9aede5febc98f055853
SHA512 8f6e6f421b49d04c872728e7c97d44c5d3b0883d800150c3131dcd1903a6add48b8e0f47391675a98f5b0f8cbf53e86518746024fe3d422ecb275b0567870f0d
SSDEEP 12288:wUxAov/9z5t2jOVnBKfDD8mzrJbuKx+ykXHxA3N/:weAovLt2jSB7m/1ri3e39
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8736aee0094e4ec06031672595563f43_JaffaCakes118

File Explorer

8736aee0094e4ec06031672595563f43_JaffaCakes118

.exe 566KB

8736aee0094e4ec06031672595563f43_JaffaCakes118

IMPHASH aa28841a98fbdef9684f8dac2b470256
SHA256 1e74390fbc3bd943d4faf6c188d4ad05923739643d7f7ca67ba5668f2d2dc352
MD5 8736aee0094e4ec06031672595563f43
SHA1 d9bcaf7da0d47e66165fb9aede5febc98f055853
SHA512 8f6e6f421b49d04c872728e7c97d44c5d3b0883d800150c3131dcd1903a6add48b8e0f47391675a98f5b0f8cbf53e86518746024fe3d422ecb275b0567870f0d
SSDEEP 12288:wUxAov/9z5t2jOVnBKfDD8mzrJbuKx+ykXHxA3N/:weAovLt2jSB7m/1ri3e39
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

354864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pekisihiv\zayedi\s.pdb

kernel32

ExitProcess InterlockedDecrement FindFirstFileExW OutputDebugStringW GetModuleHandleW GetTickCount IsBadReadPtr GetConsoleAliasesLengthA SetFileTime GlobalAlloc SetFileShortNameW TerminateThread GetVersionExW LocalHandle GetModuleFileNameW GetEnvironmentVariableA lstrlenW GetConsoleOutputCP SetCurrentDirectoryA GetStartupInfoA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA MoveFileW WriteProfileSectionA CopyFileA GlobalGetAtomNameA SearchPathA OpenWaitableTimerA LoadLibraryA ProcessIdToSessionId OpenWaitableTimerW WriteProfileSectionW GetOEMCP GetProcessShutdownParameters FreeEnvironmentStringsW CompareStringA GetWindowsDirectoryW DeleteTimerQueueTimer DeleteFileW AddConsoleAliasA CreateFileW GetCommandLineW HeapSetInformation GetStartupInfoW EnterCriticalSection LeaveCriticalSection DecodePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedIncrement GetEnvironmentStringsW HeapValidate TlsAlloc TlsGetValue TlsSetValue TlsFree GetLastError HeapCreate WriteFile WideCharToMultiByte GetACP GetCPInfo IsValidCodePage OutputDebugStringA WriteConsoleW LoadLibraryW RtlUnwind HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree FlushFileBuffers GetConsoleCP GetConsoleMode GetStringTypeW LCMapStringW MultiByteToWideChar SetFilePointer IsProcessorFeaturePresent CloseHandle SetStdHandle RaiseException

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

8736aee0094e4ec06031672595563f43_JaffaCakes118

kernel32

user32

generic