c90c33f237dc65cc34bac3f797ceb682_JaffaCakes118

General

Target
c90c33f237dc65cc34bac3f797ceb682_JaffaCakes118
Size 14.3MB
Sample240405-dlb5ssaf5s
SHA256 9af45fbda0ef9caf884562525796a9f84f585d029103cee764b1e6781f6e57ef
MD5 c90c33f237dc65cc34bac3f797ceb682
SHA1 9919d3358b94aefa5c7c1ea8324f43b127dbda9e
SHA512 7c83d2134f5756fb3de1b6621ebca22f19aad7370986d9ec5cf48ad466188934d5c62cb78884e626d1d4780ab80ca3908cd4d19d7b1db16df34d8d14ff032070
SSDEEP 12288:/Zwvqm0loTlEUKg7/ua4FXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:/SvqmNB/d
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c90c33f237dc65cc34bac3f797ceb682_JaffaCakes118

File Explorer

c90c33f237dc65cc34bac3f797ceb682_JaffaCakes118

.exe 14.3MB

c90c33f237dc65cc34bac3f797ceb682_JaffaCakes118

IMPHASH 99e1335f3817517f11962dc50cb29aa7
SHA256 9af45fbda0ef9caf884562525796a9f84f585d029103cee764b1e6781f6e57ef
MD5 c90c33f237dc65cc34bac3f797ceb682
SHA1 9919d3358b94aefa5c7c1ea8324f43b127dbda9e
SHA512 7c83d2134f5756fb3de1b6621ebca22f19aad7370986d9ec5cf48ad466188934d5c62cb78884e626d1d4780ab80ca3908cd4d19d7b1db16df34d8d14ff032070
SSDEEP 12288:/Zwvqm0loTlEUKg7/ua4FXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:/SvqmNB/d
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wopomineyinuba_20\cojig_burom\yezudarizafiru-wu.pdb

kernel32

CallNamedPipeA SetWaitableTimer InterlockedIncrement GetCommState InterlockedDecrement GetProfileStringW SetEvent OpenSemaphoreA FreeEnvironmentStringsA CreateNamedPipeW GetNumberFormatA ReadConsoleOutputA GetCommandLineA SetProcessPriorityBoost GetSystemTimes GetPrivateProfileIntA GetSystemDirectoryW GetVolumeInformationA GetConsoleAliasExesLengthW LeaveCriticalSection HeapCreate TerminateProcess FileTimeToSystemTime GetModuleFileNameW GetCompressedFileSizeA lstrlenW GetPrivateProfileIntW InterlockedExchange CopyFileExW SetThreadLocale GetCPInfoExW FreeLibraryAndExitThread GetLastError GetCurrentDirectoryW GetProcAddress SetStdHandle LoadLibraryA OpenMutexA CreateSemaphoreW LocalAlloc WritePrivateProfileStringA FindAtomA CreateIoCompletionPort GetModuleHandleA FindFirstChangeNotificationA HeapSetInformation FindNextFileW WriteProfileStringW TlsAlloc LocalSize FindAtomW EnumResourceLanguagesW SetFileValidData GetSystemTime LCMapStringW CopyFileExA DeleteFileA GetStartupInfoA GetThreadContext HeapValidate IsBadReadPtr RaiseException EnterCriticalSection GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode GetModuleHandleW Sleep ExitProcess TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetFilePointer GetStringTypeA GetStringTypeW GetLocaleInfoA DebugBreak OutputDebugStringA OutputDebugStringW LoadLibraryW LCMapStringA CreateFileA CloseHandle FlushFileBuffers

advapi32

InitiateSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

c90c33f237dc65cc34bac3f797ceb682_JaffaCakes118

kernel32

advapi32

generic