a2847ef32cee890eeb129f2af730dc74_JaffaCakes118

General

Target
a2847ef32cee890eeb129f2af730dc74_JaffaCakes118
Size 10.8MB
Sample240403-wcfqqsge72
SHA256 d571f943625720e60cb551920fed0c2bc03828011bdc6ec1485c66158b7b066a
MD5 a2847ef32cee890eeb129f2af730dc74
SHA1 e6c292c9ce35d24de624df00fb9b313c62d6a6b9
SHA512 a95cf0b12aca29e4be4f034bf69f965a9f9355ad49e75b11382cb4d56c73feae15d9dcdb21fab67888e5c5ba0763d6b51380b8bb96bb5c42d7ff611ea53226fe
SSDEEP 12288:6Zrif5ZHYBN6U7EP9rFRnyphAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs:6Bif5ZCEFxV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2847ef32cee890eeb129f2af730dc74_JaffaCakes118

File Explorer

a2847ef32cee890eeb129f2af730dc74_JaffaCakes118

.exe 10.8MB

a2847ef32cee890eeb129f2af730dc74_JaffaCakes118

IMPHASH 99e1335f3817517f11962dc50cb29aa7
SHA256 d571f943625720e60cb551920fed0c2bc03828011bdc6ec1485c66158b7b066a
MD5 a2847ef32cee890eeb129f2af730dc74
SHA1 e6c292c9ce35d24de624df00fb9b313c62d6a6b9
SHA512 a95cf0b12aca29e4be4f034bf69f965a9f9355ad49e75b11382cb4d56c73feae15d9dcdb21fab67888e5c5ba0763d6b51380b8bb96bb5c42d7ff611ea53226fe
SSDEEP 12288:6Zrif5ZHYBN6U7EP9rFRnyphAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs:6Bif5ZCEFxV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zejuke_jaguso\rirah\konulid.pdb

kernel32

CallNamedPipeA SetWaitableTimer InterlockedIncrement GetCommState InterlockedDecrement GetProfileStringW SetEvent OpenSemaphoreA FreeEnvironmentStringsA CreateNamedPipeW GetNumberFormatA ReadConsoleOutputA GetCommandLineA SetProcessPriorityBoost GetSystemTimes GetPrivateProfileIntA GetSystemDirectoryW GetVolumeInformationA GetConsoleAliasExesLengthW LeaveCriticalSection HeapCreate TerminateProcess FileTimeToSystemTime GetModuleFileNameW GetCompressedFileSizeA lstrlenW GetPrivateProfileIntW InterlockedExchange CopyFileExW SetThreadLocale GetCPInfoExW FreeLibraryAndExitThread GetLastError GetCurrentDirectoryW GetProcAddress SetStdHandle LoadLibraryA OpenMutexA CreateSemaphoreW LocalAlloc WritePrivateProfileStringA FindAtomA CreateIoCompletionPort GetModuleHandleA FindFirstChangeNotificationA HeapSetInformation FindNextFileW WriteProfileStringW TlsAlloc LocalSize FindAtomW EnumResourceLanguagesW SetFileValidData GetSystemTime LCMapStringW CopyFileExA DeleteFileA GetStartupInfoA GetThreadContext HeapValidate IsBadReadPtr RaiseException EnterCriticalSection GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode GetModuleHandleW Sleep ExitProcess TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetFilePointer GetStringTypeA GetStringTypeW GetLocaleInfoA DebugBreak OutputDebugStringA OutputDebugStringW LoadLibraryW LCMapStringA CreateFileA CloseHandle FlushFileBuffers

advapi32

InitiateSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

a2847ef32cee890eeb129f2af730dc74_JaffaCakes118

kernel32

advapi32

generic