89a7b5e2c84e724f2678dd2fb7fa066f_JaffaCakes118

General

Target
89a7b5e2c84e724f2678dd2fb7fa066f_JaffaCakes118
Size 293KB
Sample240402-l5x6daeb41
SHA256 63023c427fd3c3935b133a9772d0500b813f8403030867c90268514057b29bb2
MD5 89a7b5e2c84e724f2678dd2fb7fa066f
SHA1 e6d0aa9d7dd45654cb43950450724bf19839d3f3
SHA512 5e32585024cc79bfd1ef1cab730c1ccc674308ad24173a7e209b493006d5a15b8988e9e3ccf66f29ee8c6d00d0358fe3e28dac29b472988406ad34a64333794a
SSDEEP 6144:R7e2jOM/tJhEQTKH1HnJEB0iBNqX7tNfVXVHQLIiu8cfo0/pW:Ze21/tgQTK0wZGEX8cA0/M
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89a7b5e2c84e724f2678dd2fb7fa066f_JaffaCakes118

File Explorer

89a7b5e2c84e724f2678dd2fb7fa066f_JaffaCakes118

.exe 293KB

89a7b5e2c84e724f2678dd2fb7fa066f_JaffaCakes118

IMPHASH 95764cd3a93b27321012d20c57632d43
SHA256 63023c427fd3c3935b133a9772d0500b813f8403030867c90268514057b29bb2
MD5 89a7b5e2c84e724f2678dd2fb7fa066f
SHA1 e6d0aa9d7dd45654cb43950450724bf19839d3f3
SHA512 5e32585024cc79bfd1ef1cab730c1ccc674308ad24173a7e209b493006d5a15b8988e9e3ccf66f29ee8c6d00d0358fe3e28dac29b472988406ad34a64333794a
SSDEEP 6144:R7e2jOM/tJhEQTKH1HnJEB0iBNqX7tNfVXVHQLIiu8cfo0/pW:Ze21/tgQTK0wZGEX8cA0/M
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kivavanucir65-neyedahodarug\54_zudosihisu\nisesuze s.pdb

kernel32

HeapAlloc GetCurrentProcess GetEnvironmentStringsW SetEvent FlushViewOfFile SleepEx ReadConsoleW InitAtomTable HeapDestroy WriteConsoleW GetModuleFileNameW CreateActCtxA DeactivateActCtx GetProcAddress BeginUpdateResourceW GetAtomNameA LocalAlloc SetEnvironmentVariableA GetOEMCP CreateIoCompletionPort SetConsoleTitleW GetModuleHandleA GetProcessShutdownParameters EraseTape VirtualProtect GetCPInfoExA Module32Next ReleaseMutex EndUpdateResourceA GetVersionExA FindNextVolumeA lstrcpyW LCMapStringW SetLastError SetProcessAffinityMask IsProcessorFeaturePresent HeapReAlloc EncodePointer DecodePointer GetModuleHandleW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement ReadFile HeapFree SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP IsValidCodePage CloseHandle LoadLibraryW WriteFile FreeEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode Sleep MultiByteToWideChar SetStdHandle RtlUnwind FlushFileBuffers GetStringTypeW HeapSize RaiseException CreateFileW

user32

ClientToScreen

gdi32

GetBitmapBits

winhttp

WinHttpSetOption

Sharing

General

Malware Config

Signatures

File Explorer

89a7b5e2c84e724f2678dd2fb7fa066f_JaffaCakes118

kernel32

user32

gdi32

winhttp

generic