ab38d06bf7e5f592f98b2fa16aa0bd5a_JaffaCakes118

General

Target
ab38d06bf7e5f592f98b2fa16aa0bd5a_JaffaCakes118
Size 10.3MB
Sample240404-a7ax3sab67
SHA256 b0aa46638aafaa212deedaba1c016aabddb40a92969ab53d49b83528307f057e
MD5 ab38d06bf7e5f592f98b2fa16aa0bd5a
SHA1 e7e88dfb61fbf258a82f23805e9879a3efa70d4b
SHA512 a52e6aa3846052e76ebd06f69dd9924d12c603824f290fbfb853895f2eba394069bdf3335ad9df2aeb7bd283c6c62f5df759091ae596df5a8a619a5622f07b84
SSDEEP 49152:1Ighhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh:a
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab38d06bf7e5f592f98b2fa16aa0bd5a_JaffaCakes118

File Explorer

ab38d06bf7e5f592f98b2fa16aa0bd5a_JaffaCakes118

.exe 10.3MB

ab38d06bf7e5f592f98b2fa16aa0bd5a_JaffaCakes118

IMPHASH 1435fac27cb0e146b6806556c822ef8f
SHA256 b0aa46638aafaa212deedaba1c016aabddb40a92969ab53d49b83528307f057e
MD5 ab38d06bf7e5f592f98b2fa16aa0bd5a
SHA1 e7e88dfb61fbf258a82f23805e9879a3efa70d4b
SHA512 a52e6aa3846052e76ebd06f69dd9924d12c603824f290fbfb853895f2eba394069bdf3335ad9df2aeb7bd283c6c62f5df759091ae596df5a8a619a5622f07b84
SSDEEP 49152:1Ighhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh:a
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jarapusawofize\90.pdb

kernel32

FreeLibrary InterlockedIncrement GetCommState GetProfileStringW UnlockFile CallNamedPipeW FreeEnvironmentStringsA GetNumberFormatA GetCommandLineA FindResourceExA GlobalAlloc GetSystemWow64DirectoryW GetSystemWindowsDirectoryA HeapDestroy GetModuleFileNameW GetCompressedFileSizeA GetSystemDirectoryA CreateActCtxA GetBinaryTypeW WritePrivateProfileStringW LCMapStringA GetPrivateProfileIntW CopyFileExW SetThreadLocale GetStdHandle GetCPInfoExW GetLastError SetLastError GetProcAddress CreateNamedPipeA EnterCriticalSection LoadLibraryA OpenMutexA SetSystemTime CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation FindNextFileW GetCurrentDirectoryA SetFileShortNameA FindAtomW UnregisterWaitEx DeleteFileA GetVolumeInformationW lstrlenA GetStartupInfoA GetThreadContext CloseHandle CreateFileW WideCharToMultiByte EncodePointer DecodePointer GetStartupInfoW InterlockedDecrement GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree HeapValidate IsBadReadPtr QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate LeaveCriticalSection LoadLibraryW IsProcessorFeaturePresent OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree SetFilePointer GetConsoleCP GetConsoleMode RaiseException SetStdHandle FlushFileBuffers

advapi32

InitiateSystemShutdownA AbortSystemShutdownA

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

ab38d06bf7e5f592f98b2fa16aa0bd5a_JaffaCakes118

kernel32

advapi32

winhttp

generic