ac1587025078cd63e45f7fad10149100_JaffaCakes118

General

Target
ac1587025078cd63e45f7fad10149100_JaffaCakes118
Size 12.8MB
Sample240404-bznpmsba2v
SHA256 6b106fead48601e7842cdcf7d3220e4b9da5f82fbc189a4b83401ee5b13a496b
MD5 ac1587025078cd63e45f7fad10149100
SHA1 e377d25cb1cc15d29a4a27dc4f53c9124085d902
SHA512 85eff64f830223362020b53869fed151e20201130633fe8f54502a2616cdb63a1c835f0a55e92778fa2d9755f11c84f918d3a717644311de1a4f003077442f01
SSDEEP 12288:LZj/zVtLo3uWXQDWT7CfuUNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNL:LV/zVxTWT7CW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac1587025078cd63e45f7fad10149100_JaffaCakes118

File Explorer

ac1587025078cd63e45f7fad10149100_JaffaCakes118

.exe 12.8MB

ac1587025078cd63e45f7fad10149100_JaffaCakes118

IMPHASH 9b494192bab1e0e5f914d8f6d610f95a
SHA256 6b106fead48601e7842cdcf7d3220e4b9da5f82fbc189a4b83401ee5b13a496b
MD5 ac1587025078cd63e45f7fad10149100
SHA1 e377d25cb1cc15d29a4a27dc4f53c9124085d902
SHA512 85eff64f830223362020b53869fed151e20201130633fe8f54502a2616cdb63a1c835f0a55e92778fa2d9755f11c84f918d3a717644311de1a4f003077442f01
SSDEEP 12288:LZj/zVtLo3uWXQDWT7CfuUNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNL:LV/zVxTWT7CW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gegonorenomi_nipex\remuxikikor\jefaxihar\sokunuwotohur78 cij.pdb

kernel32

CallNamedPipeA SetWaitableTimer InterlockedIncrement GetCommState InterlockedDecrement GetProfileStringW SetEvent OpenSemaphoreA FreeEnvironmentStringsA CreateNamedPipeW LocalFlags GetNumberFormatA ReadConsoleOutputA SetProcessPriorityBoost GetSystemTimes GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW GetVolumeInformationA LoadLibraryW TerminateThread GetConsoleAliasExesLengthW HeapDestroy LeaveCriticalSection FileTimeToSystemTime GetCompressedFileSizeA lstrlenW GetPrivateProfileIntW InterlockedExchange CopyFileExW SetThreadLocale GetCPInfoExW FreeLibraryAndExitThread GetLastError GetCurrentDirectoryW GetProcAddress SetStdHandle LoadLibraryA OpenMutexA CreateSemaphoreW WritePrivateProfileStringA FindAtomA GetModuleFileNameA CreateIoCompletionPort GetModuleHandleA FindFirstChangeNotificationA HeapSetInformation FindNextFileW WriteProfileStringW TlsAlloc LocalSize FindAtomW EnumResourceLanguagesW SetFileValidData GetSystemTime GetProfileSectionW LCMapStringW DeleteFileA GetThreadContext GetStartupInfoA GetCommandLineW GetCommandLineA HeapValidate IsBadReadPtr RaiseException EnterCriticalSection GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode GetModuleHandleW Sleep ExitProcess TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetFilePointer GetStringTypeA GetStringTypeW GetLocaleInfoA DebugBreak OutputDebugStringA OutputDebugStringW LCMapStringA CreateFileA CloseHandle FlushFileBuffers

advapi32

InitiateSystemShutdownA ImpersonateSelf

Sharing

General

Malware Config

Signatures

File Explorer

ac1587025078cd63e45f7fad10149100_JaffaCakes118

kernel32

advapi32

generic