c9a440b05ab3e0acc687d1d4414d068d_JaffaCakes118

General

Target
c9a440b05ab3e0acc687d1d4414d068d_JaffaCakes118
Size 1.2MB
Sample240405-d3x4laba91
SHA256 29c3c028441946cc1790e63882fc638594de44704073914d1ae4456dee4b131e
MD5 c9a440b05ab3e0acc687d1d4414d068d
SHA1 7f175c9756fb3ea1751f16a94ab00cb4602e6cee
SHA512 beb55cd5495f7187d708c45144eaeb16390c1a503cdfb96e32418f8f93467eed2aacdc3a9712adf8b14872a141b93f1e5b473ebb405618b91c8d8549ac8ac5e9
SSDEEP 24576:v/80Apxpo2ctW1CBOjwlrjQQYLyW6goqia:XMXpo2SBBmwJLyago
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9a440b05ab3e0acc687d1d4414d068d_JaffaCakes118

File Explorer

c9a440b05ab3e0acc687d1d4414d068d_JaffaCakes118

.exe 1.2MB

c9a440b05ab3e0acc687d1d4414d068d_JaffaCakes118

IMPHASH e97201e7ef5f430ebcbaea94835aaebd
SHA256 29c3c028441946cc1790e63882fc638594de44704073914d1ae4456dee4b131e
MD5 c9a440b05ab3e0acc687d1d4414d068d
SHA1 7f175c9756fb3ea1751f16a94ab00cb4602e6cee
SHA512 beb55cd5495f7187d708c45144eaeb16390c1a503cdfb96e32418f8f93467eed2aacdc3a9712adf8b14872a141b93f1e5b473ebb405618b91c8d8549ac8ac5e9
SSDEEP 24576:v/80Apxpo2ctW1CBOjwlrjQQYLyW6goqia:XMXpo2SBBmwJLyago
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

1026896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wagob11-yanegalogidi\mehinolowuwor\30 piduwulev42.pdb

kernel32

FileTimeToDosDateTime CreateTimerQueue SearchPathW InterlockedDecrement GetSystemWindowsDirectoryW AddConsoleAliasW FlushViewOfFile FreeEnvironmentStringsA OutputDebugStringW CreateActCtxW GetDriveTypeA GlobalAlloc LoadLibraryW GetCalendarInfoA GetSystemWow64DirectoryW SetSystemTimeAdjustment GetVersionExW VerifyVersionInfoA GetModuleFileNameW GetEnvironmentVariableA CompareStringW lstrlenW SetThreadPriority GetStartupInfoA OpenMutexW IsDBCSLeadByteEx GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress SetVolumeLabelW WriteProfileSectionA GetConsoleDisplayMode SearchPathA GetPrivateProfileStringA _hwrite ProcessIdToSessionId RegisterWaitForSingleObject IsSystemResumeAutomatic AddAtomW SetCurrentDirectoryW SetFileApisToANSI HeapWalk GetModuleFileNameA CreateIoCompletionPort GetModuleHandleA QueryMemoryResourceNotification FreeEnvironmentStringsW FillConsoleOutputAttribute VirtualProtect GetCPInfoExA SetProcessShutdownParameters DeleteFileW CloseHandle CreateFileW InterlockedIncrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException GetModuleHandleW ExitProcess GetLastError WriteFile GetStdHandle IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount HeapValidate IsBadReadPtr OutputDebugStringA WriteConsoleW GetFileType QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount TlsAlloc TlsGetValue TlsSetValue TlsFree HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind MultiByteToWideChar WideCharToMultiByte LCMapStringW GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers

user32

GetMessageTime

Sharing

General

Malware Config

Signatures

File Explorer

c9a440b05ab3e0acc687d1d4414d068d_JaffaCakes118

kernel32

user32

generic