bb9e7bee97a01aae02cd11a19dc52151_JaffaCakes118

General

Target
bb9e7bee97a01aae02cd11a19dc52151_JaffaCakes118
Size 593KB
Sample240404-smqrxaba3x
SHA256 c04c7f92ef82931a20768d5b5c98c3188995ca2e071bfa38697ac844c2267123
MD5 bb9e7bee97a01aae02cd11a19dc52151
SHA1 ae50bb1d13fddeb8545c4f3bca32422f19c59031
SHA512 5dd4ff742604830ab0f8b14dc29354e67a7427f83922954c63f345e7fa2d8a22d5f6d4e351b8cdde964d2cfb29fa3cf4da0c06bbaad233f1c02eb601dd8bda75
SSDEEP 12288:Qz1X7hARH2URW4Sp4jYcEsOaiS15WAMCk5115q5TuO6m/ruj88e2U4GXRt:QzZ76zJYjsOatOAMBv52aOA88e2wt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb9e7bee97a01aae02cd11a19dc52151_JaffaCakes118

File Explorer

bb9e7bee97a01aae02cd11a19dc52151_JaffaCakes118

.exe 593KB

bb9e7bee97a01aae02cd11a19dc52151_JaffaCakes118

IMPHASH b4cda15a674ef12000829b9be50880b2
SHA256 c04c7f92ef82931a20768d5b5c98c3188995ca2e071bfa38697ac844c2267123
MD5 bb9e7bee97a01aae02cd11a19dc52151
SHA1 ae50bb1d13fddeb8545c4f3bca32422f19c59031
SHA512 5dd4ff742604830ab0f8b14dc29354e67a7427f83922954c63f345e7fa2d8a22d5f6d4e351b8cdde964d2cfb29fa3cf4da0c06bbaad233f1c02eb601dd8bda75
SSDEEP 12288:Qz1X7hARH2URW4Sp4jYcEsOaiS15WAMCk5115q5TuO6m/ruj88e2U4GXRt:QzZ76zJYjsOatOAMBv52aOA88e2wt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

412832

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fimuzi\yidu77\peburo.pdb

kernel32

InterlockedDecrement FindFirstFileExW OutputDebugStringW GetModuleHandleW GetTickCount IsBadReadPtr GetConsoleAliasesLengthA SetFileShortNameW TerminateThread GetVersionExW LocalHandle GetModuleFileNameW GetEnvironmentVariableA ExitThread lstrlenW GetStartupInfoW GetConsoleOutputCP SetCurrentDirectoryA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA MoveFileW WriteProfileSectionA CopyFileA GlobalGetAtomNameA SearchPathA _hwrite OpenWaitableTimerA LoadLibraryA ProcessIdToSessionId OpenWaitableTimerW LocalAlloc WriteProfileSectionW GetOEMCP GetProcessShutdownParameters FreeEnvironmentStringsW CompareStringA GetFileTime GetWindowsDirectoryW DeleteTimerQueueTimer DeleteFileW AddConsoleAliasA CloseHandle CreateFileW WideCharToMultiByte InterlockedIncrement MultiByteToWideChar InterlockedExchange EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapValidate GetCommandLineW HeapSetInformation GetCPInfo RtlUnwind RaiseException LCMapStringW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount HeapAlloc GetModuleFileNameA GetLastError HeapReAlloc HeapSize HeapQueryInformation HeapFree HeapCreate GetACP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType WriteFile GetStringTypeW GetLocaleInfoW OutputDebugStringA WriteConsoleW LoadLibraryW GetLocaleInfoA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

bb9e7bee97a01aae02cd11a19dc52151_JaffaCakes118

kernel32

user32

generic