ab9e5ea06c7a9b6d7aef25faecc2e201_JaffaCakes118

General

Target
ab9e5ea06c7a9b6d7aef25faecc2e201_JaffaCakes118
Size 582KB
Sample240404-bkdacsac8y
SHA256 55c01c3e351dc7e3c3d567bba01150e42314c51328b0e164963abcdf549f975a
MD5 ab9e5ea06c7a9b6d7aef25faecc2e201
SHA1 d1cfdbc2a53f8328e20d8e8c024352a3eb1747a2
SHA512 6baa03fcb65aa299ea882e746d39bba7c593ba2677ccc9ebefcddf2788f1edbda01ed9f3f3bb5acdb3f8510c3be4d43a2449afbd456a15cad5864fd33069d083
SSDEEP 12288:cCOL6o9tvrbinB0lB5neKn9mbrJo2akpJjX5YwItb:fOLLTgQe+Mbr3PXK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab9e5ea06c7a9b6d7aef25faecc2e201_JaffaCakes118

File Explorer

ab9e5ea06c7a9b6d7aef25faecc2e201_JaffaCakes118

.exe 582KB

ab9e5ea06c7a9b6d7aef25faecc2e201_JaffaCakes118

IMPHASH 6a88739b00d2f75a49bbb4078e077ebf
SHA256 55c01c3e351dc7e3c3d567bba01150e42314c51328b0e164963abcdf549f975a
MD5 ab9e5ea06c7a9b6d7aef25faecc2e201
SHA1 d1cfdbc2a53f8328e20d8e8c024352a3eb1747a2
SHA512 6baa03fcb65aa299ea882e746d39bba7c593ba2677ccc9ebefcddf2788f1edbda01ed9f3f3bb5acdb3f8510c3be4d43a2449afbd456a15cad5864fd33069d083
SSDEEP 12288:cCOL6o9tvrbinB0lB5neKn9mbrJo2akpJjX5YwItb:fOLLTgQe+Mbr3PXK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

357120

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zucafupoto\vidar35\fagufidoto\xonajijiti-vuyekeneh\nunoxor.pdb

kernel32

GetSystemDefaultLangID ExitProcess GetConsoleAliasesLengthW GetCPInfo InterlockedDecrement AddConsoleAliasW FreeEnvironmentStringsA GetModuleHandleW GetTickCount SetFileTime CreateActCtxW GlobalAlloc GetConsoleMode TerminateThread GetVersionExW IsBadWritePtr FileTimeToSystemTime LocalHandle GetEnvironmentVariableA CompareStringW lstrlenW VerifyVersionInfoW GetStartupInfoA FindFirstFileExA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress WriteProfileSectionA CopyFileA GlobalGetAtomNameA SearchPathA ProcessIdToSessionId OpenWaitableTimerW MoveFileA SetCurrentDirectoryW WriteProfileSectionW GetModuleFileNameA WriteProfileStringA GetModuleHandleA GetProcessShutdownParameters FreeEnvironmentStringsW SetFileShortNameA TlsAlloc GetWindowsDirectoryW DeleteFileW LocalFileTimeToFileTime GetStartupInfoW HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree GetLastError QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc SetFilePointer WideCharToMultiByte GetConsoleCP InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW RtlUnwind MultiByteToWideChar GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetLocaleInfoA LoadLibraryA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

ab9e5ea06c7a9b6d7aef25faecc2e201_JaffaCakes118

kernel32

generic