915b00f6ee321f9a455dcf0a30b83b90_JaffaCakes118

General

Target
915b00f6ee321f9a455dcf0a30b83b90_JaffaCakes118
Size 14.3MB
Sample240402-twkspafd35
SHA256 f368d83d2a61b7f8f997de5ea34dbdc7bf407b4b53dbb60e47afac4a3b6189d5
MD5 915b00f6ee321f9a455dcf0a30b83b90
SHA1 a4419d7733580efb43bfdc80bfd793796fd875f8
SHA512 79921aad82afc920bdde998203b7b55f3f937d2618de3575148a68e28de0e63bfa20c5e95478e52ff15a76262714d4248894a576fe2b9b65ac069651dabdc6b1
SSDEEP 12288:Ghq8okPz+6/uWlQJVpppppppppppppppppppppppppppppppppppppppppppppph:/Sz+R
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
915b00f6ee321f9a455dcf0a30b83b90_JaffaCakes118

File Explorer

915b00f6ee321f9a455dcf0a30b83b90_JaffaCakes118

.exe 14.3MB

915b00f6ee321f9a455dcf0a30b83b90_JaffaCakes118

IMPHASH 7d2b5fe056f9f1898f2b12424a66461a
SHA256 f368d83d2a61b7f8f997de5ea34dbdc7bf407b4b53dbb60e47afac4a3b6189d5
MD5 915b00f6ee321f9a455dcf0a30b83b90
SHA1 a4419d7733580efb43bfdc80bfd793796fd875f8
SHA512 79921aad82afc920bdde998203b7b55f3f937d2618de3575148a68e28de0e63bfa20c5e95478e52ff15a76262714d4248894a576fe2b9b65ac069651dabdc6b1
SSDEEP 12288:Ghq8okPz+6/uWlQJVpppppppppppppppppppppppppppppppppppppppppppppph:/Sz+R
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8128

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\budumamopiy\varajocijejo100\xotefaxote\xobonise\g.pdb

kernel32

GetThreadContext SetInformationJobObject lstrlenA FindResourceExW InterlockedDecrement GetSystemWindowsDirectoryW GetProfileStringW SetConsoleScreenBufferSize FreeEnvironmentStringsA OutputDebugStringW CreateNamedPipeW GetUserDefaultLangID GetCommandLineA SetFileShortNameW LoadLibraryW FreeConsole GetSystemWow64DirectoryW InterlockedPopEntrySList HeapDestroy GetModuleFileNameW GetStartupInfoW GetCPInfoExW OpenMutexW GetLastError SetLastError GetProcAddress MoveFileW SetStdHandle SearchPathA VirtualAllocEx GetPrivateProfileStringA LocalAlloc SetSystemTime GetModuleFileNameA WriteProfileStringA WTSGetActiveConsoleSessionId CreateIoCompletionPort HeapSetInformation GetCurrentDirectoryA ReadConsoleInputW FindAtomW DeleteFileW CreateFileW RaiseException WideCharToMultiByte GetCommandLineW InterlockedIncrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer WriteFile GetStdHandle GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree HeapValidate IsBadReadPtr EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate IsProcessorFeaturePresent OutputDebugStringA WriteConsoleW LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree FlushFileBuffers ReadFile CloseHandle

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

915b00f6ee321f9a455dcf0a30b83b90_JaffaCakes118

kernel32

winhttp

generic