ad74dda467f62cf8e37226ecb0502ce3_JaffaCakes118

General

Target
ad74dda467f62cf8e37226ecb0502ce3_JaffaCakes118
Size 337KB
Sample240404-c8t4fscf5s
SHA256 9ebd2db021e7423ea13def07da2e9fe74828d065efefdff99452520af41d725b
MD5 ad74dda467f62cf8e37226ecb0502ce3
SHA1 6c815a7804e791586c061a4b67b0cc12329df653
SHA512 f37264f17b08193a3e5fbf438c7ba2aed6ca51ffc55c15d23a5aeac8572699a36f04a74ddf30872245c062158c85c7b7f51a2c0aa571ba3ec4ec143b177b5f47
SSDEEP 6144:oUunuCA8dZbYFMVUA0vHWHsNV7BLZZ28:7P8TbyMVU9vCsT7BVw8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad74dda467f62cf8e37226ecb0502ce3_JaffaCakes118

File Explorer

ad74dda467f62cf8e37226ecb0502ce3_JaffaCakes118

.exe 337KB

ad74dda467f62cf8e37226ecb0502ce3_JaffaCakes118

IMPHASH d8470aebc2200bafc1ff60318f406103
SHA256 9ebd2db021e7423ea13def07da2e9fe74828d065efefdff99452520af41d725b
MD5 ad74dda467f62cf8e37226ecb0502ce3
SHA1 6c815a7804e791586c061a4b67b0cc12329df653
SHA512 f37264f17b08193a3e5fbf438c7ba2aed6ca51ffc55c15d23a5aeac8572699a36f04a74ddf30872245c062158c85c7b7f51a2c0aa571ba3ec4ec143b177b5f47
SSDEEP 6144:oUunuCA8dZbYFMVUA0vHWHsNV7BLZZ28:7P8TbyMVU9vCsT7BVw8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

122816

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kuzufugawuxew92 yijejugepu bikowenu tufa\mahiwasatugogu74\zir.pdb

kernel32

FileTimeToDosDateTime DosDateTimeToFileTime CreateTimerQueue SetFilePointer GetDriveTypeW SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW FlushViewOfFile OutputDebugStringW GetModuleHandleW GetPrivateProfileStringW GetSystemWow64DirectoryA CreateActCtxW _hread VerifyVersionInfoA GetModuleFileNameW GetOverlappedResult CompareStringW lstrlenW GetStartupInfoW VerifyVersionInfoW InterlockedExchange SetCurrentDirectoryA OpenMutexW GetLastError GetCurrentDirectoryW GetProcAddress GetLongPathNameA VirtualAlloc SetVolumeLabelW WriteProfileSectionA GetConsoleDisplayMode CreateMemoryResourceNotification SearchPathA LoadLibraryA LocalAlloc SetFileApisToANSI PostQueuedCompletionStatus GetCommMask AddAtomA HeapWalk SetEnvironmentVariableA WTSGetActiveConsoleSessionId SetConsoleCursorInfo GetThreadPriority FindFirstChangeNotificationA GetProcessShutdownParameters FreeEnvironmentStringsW RequestWakeupLatency GetCPInfoExA GetVersionExA FindAtomW DeleteFileW AddConsoleAliasA CloseHandle CreateFileW SetStdHandle InterlockedIncrement InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetCommandLineA HeapSetInformation RaiseException ExitProcess WriteFile GetStdHandle IsProcessorFeaturePresent HeapValidate IsBadReadPtr InitializeCriticalSectionAndSpinCount OutputDebugStringA WriteConsoleW GetFileType LoadLibraryW QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetMessageTime DrawFrameControl

msimg32

GradientFill

Sharing

General

Malware Config

Signatures

File Explorer

ad74dda467f62cf8e37226ecb0502ce3_JaffaCakes118

kernel32

user32

msimg32

generic