a841a4cf146be49d8368cb6b92aea1be_JaffaCakes118

General

Target
a841a4cf146be49d8368cb6b92aea1be_JaffaCakes118
Size 10.2MB
Sample240403-2ayfnafa76
SHA256 a5c7112ff3e20b3f66cad4ceaa8c395dc157a94fad24d5aed5202d53c6714306
MD5 a841a4cf146be49d8368cb6b92aea1be
SHA1 482a1fbe8a24b61c095db3c32a8ee22534ed7af9
SHA512 d7122080cbb2fa84183030afb917e8407617c62291adde3048342fc9b38ec0b72d0ba38f224d81a1b18609ece5b63c3f3207ceaf1028b6e21f7a6be1cd3b03eb
SSDEEP 24576:U/FfqVdOBr70Fm0999999999999999999999999999999999999999999999999V:sFU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a841a4cf146be49d8368cb6b92aea1be_JaffaCakes118

File Explorer

a841a4cf146be49d8368cb6b92aea1be_JaffaCakes118

.exe 10.2MB

a841a4cf146be49d8368cb6b92aea1be_JaffaCakes118

IMPHASH 578dc7dab5389346cbcc286cae0d11e3
SHA256 a5c7112ff3e20b3f66cad4ceaa8c395dc157a94fad24d5aed5202d53c6714306
MD5 a841a4cf146be49d8368cb6b92aea1be
SHA1 482a1fbe8a24b61c095db3c32a8ee22534ed7af9
SHA512 d7122080cbb2fa84183030afb917e8407617c62291adde3048342fc9b38ec0b72d0ba38f224d81a1b18609ece5b63c3f3207ceaf1028b6e21f7a6be1cd3b03eb
SSDEEP 24576:U/FfqVdOBr70Fm0999999999999999999999999999999999999999999999999V:sFU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

157952

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\geyekomuf\jicam_rezuyedinikow lerafiluzur\zoyociku.pdb

kernel32

SearchPathW InterlockedIncrement GetProcessPriorityBoost GetModuleHandleW GetTickCount IsBadReadPtr GetConsoleAliasesLengthA SetFileShortNameW CopyFileW GetSystemTimeAdjustment GetVersionExW GetModuleFileNameW GetEnvironmentVariableA ExitThread lstrlenW GetStartupInfoW SetCurrentDirectoryA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA WriteProfileSectionA CreateMemoryResourceNotification GlobalGetAtomNameA _hwrite LoadLibraryA ProcessIdToSessionId OpenWaitableTimerW LocalAlloc MoveFileA SetConsoleOutputCP WriteProfileSectionW GetProcessShutdownParameters FreeEnvironmentStringsW GetCurrentDirectoryA CompareStringA GetFileTime OutputDebugStringA GetWindowsDirectoryW DeleteTimerQueueTimer DeleteFileW AddConsoleAliasA CloseHandle CreateFileW SetStdHandle WideCharToMultiByte InterlockedDecrement MultiByteToWideChar InterlockedExchange EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapValidate GetCommandLineW HeapSetInformation GetCPInfo RtlUnwind RaiseException LCMapStringW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount HeapAlloc GetModuleFileNameA GetLastError HeapReAlloc HeapSize HeapQueryInformation HeapFree HeapCreate GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType WriteFile GetStringTypeW GetLocaleInfoW WriteConsoleW OutputDebugStringW LoadLibraryW GetLocaleInfoA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetAncestor

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

a841a4cf146be49d8368cb6b92aea1be_JaffaCakes118

kernel32

user32

winhttp

generic