bd981ae30157d03c4f1c4dabc6fd0103_JaffaCakes118

General

Target
bd981ae30157d03c4f1c4dabc6fd0103_JaffaCakes118
Size 14.2MB
Sample240404-vefm3sch8y
SHA256 40d7a1c66cbc76edf2b6e5ff906a83043ebe95314518815ea6fc3c6894a9214c
MD5 bd981ae30157d03c4f1c4dabc6fd0103
SHA1 0f445dcea34f929b38a4fb979f07f9202105ad1b
SHA512 0b88f7044f3a8d0b87727dd337543b4ac81fd9ec0848fc34ab71ebf2cc09d8bd53ae1c820d507dadbf169b2c26609ff64e7019223aa4a8708b57f1f36d16026a
SSDEEP 196608:o3qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqf:o
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd981ae30157d03c4f1c4dabc6fd0103_JaffaCakes118

File Explorer

bd981ae30157d03c4f1c4dabc6fd0103_JaffaCakes118

.exe 14.2MB

bd981ae30157d03c4f1c4dabc6fd0103_JaffaCakes118

IMPHASH 56224a64339684be7c7ed8cfa70e9258
SHA256 40d7a1c66cbc76edf2b6e5ff906a83043ebe95314518815ea6fc3c6894a9214c
MD5 bd981ae30157d03c4f1c4dabc6fd0103
SHA1 0f445dcea34f929b38a4fb979f07f9202105ad1b
SHA512 0b88f7044f3a8d0b87727dd337543b4ac81fd9ec0848fc34ab71ebf2cc09d8bd53ae1c820d507dadbf169b2c26609ff64e7019223aa4a8708b57f1f36d16026a
SSDEEP 196608:o3qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqf:o
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nan\mulubocedo\14\zetiwom lazisecu\xanulavabo78.pdb

kernel32

GetCommandLineW GetThreadContext lstrlenA InterlockedIncrement GetQueuedCompletionStatus GetCommState GetSystemWindowsDirectoryW GetProfileStringW SetConsoleScreenBufferSize CallNamedPipeW FreeEnvironmentStringsA SetTapeParameters CreateNamedPipeW GetCompressedFileSizeW CreateActCtxW FindResourceExA GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetSystemWow64DirectoryW HeapDestroy CreateSemaphoreA GetBinaryTypeA QueryInformationJobObject GetStartupInfoW LCMapStringA GetPrivateProfileIntW GetLastError SetLastError GetProcAddress SetStdHandle SearchPathA LocalAlloc GetNumberFormatW FindAtomA GetModuleFileNameA FindNextFileA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation GetCurrentDirectoryA OutputDebugStringA GetCPInfoExA FindAtomW DeleteFileW GetSystemTime CopyFileExA InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW WriteFile GetStdHandle EnterCriticalSection LeaveCriticalSection RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW HeapValidate IsBadReadPtr HeapCreate SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeW LCMapStringW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent FlushFileBuffers ReadFile RaiseException CreateFileW CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

bd981ae30157d03c4f1c4dabc6fd0103_JaffaCakes118

kernel32

generic