90319fa377061b791d1b9d3a62a41a8a_JaffaCakes118

General

Target
90319fa377061b791d1b9d3a62a41a8a_JaffaCakes118
Size 10.5MB
Sample240402-st8ajaeb5v
SHA256 2da74bff266af2128ede65eed746b3b1261092021ce8aa9f33af315742a3e4ab
MD5 90319fa377061b791d1b9d3a62a41a8a
SHA1 f22b86431b26afa5ee8399cb19859b5ba8c842f6
SHA512 a8abaf05c33c7028ccf33c9d5d8227c303a1a831cd3d9122fa912d56b01f2eb19a21987574950bf977c31fcc40a3cf6bf8e41518f3699de043c666212dd6e8ae
SSDEEP 6144:0wee3eUmeaedGxyF1t9cj9lxbxaMPaMfh4EfzowLG7:0De6TSsyF+jdxacX6kzo4O
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90319fa377061b791d1b9d3a62a41a8a_JaffaCakes118

File Explorer

90319fa377061b791d1b9d3a62a41a8a_JaffaCakes118

.exe 10.5MB

90319fa377061b791d1b9d3a62a41a8a_JaffaCakes118

IMPHASH 22bb38bf1203a5ace32b34a360eaaf29
SHA256 2da74bff266af2128ede65eed746b3b1261092021ce8aa9f33af315742a3e4ab
MD5 90319fa377061b791d1b9d3a62a41a8a
SHA1 f22b86431b26afa5ee8399cb19859b5ba8c842f6
SHA512 a8abaf05c33c7028ccf33c9d5d8227c303a1a831cd3d9122fa912d56b01f2eb19a21987574950bf977c31fcc40a3cf6bf8e41518f3699de043c666212dd6e8ae
SSDEEP 6144:0wee3eUmeaedGxyF1t9cj9lxbxaMPaMfh4EfzowLG7:0De6TSsyF+jdxacX6kzo4O
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sayorixay\fiw.pdb

kernel32

GetCommandLineW FileTimeToDosDateTime HeapReAlloc GetNativeSystemInfo FindFirstChangeNotificationW CopyFileExW TlsGetValue GetStringTypeA SetLocalTime CallNamedPipeA SetWaitableTimer InterlockedIncrement GetNamedPipeHandleStateA CreateDirectoryW GlobalLock SetHandleInformation GetProfileStringW GetProfileSectionA FreeEnvironmentStringsA GetModuleHandleW GetPrivateProfileStringW ReadConsoleW GetCompressedFileSizeW SetCommState SetProcessPriorityBoost GlobalAlloc GetVolumeInformationA LoadLibraryW TerminateThread GetSystemWindowsDirectoryA VerifyVersionInfoA EnumResourceLanguagesA IsDBCSLeadByte GetSystemDirectoryA lstrlenW WritePrivateProfileStringW LCMapStringA GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetCPInfoExW GetLastError GetThreadLocale GetProcAddress SetStdHandle EnterCriticalSection DisableThreadLibraryCalls LoadLibraryA FindAtomA GetOEMCP Process32NextW WriteProfileStringA GetThreadPriority QueryMemoryResourceNotification HeapSetInformation FreeEnvironmentStringsW FindNextFileW GetCurrentDirectoryA GetCurrentThreadId LocalSize UnregisterWaitEx GetSystemTime GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW InterlockedDecrement RtlUnwind GetACP GetCPInfo IsValidCodePage TlsAlloc TlsSetValue TlsFree SetLastError DeleteCriticalSection LeaveCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize VirtualAlloc SetFilePointer GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeW GetLocaleInfoA LCMapStringW InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

winhttp

WinHttpQueryOption

Sharing

General

Malware Config

Signatures

File Explorer

90319fa377061b791d1b9d3a62a41a8a_JaffaCakes118

kernel32

winhttp

generic