cdf948f19635662f3f7fcb8a1dbc1d74_JaffaCakes118

General

Target
cdf948f19635662f3f7fcb8a1dbc1d74_JaffaCakes118
Size 11.5MB
Sample240405-jtsqeafd56
SHA256 90866ff59fb98f3e2e5e3cfc75a4ca0acb389f3ef9d64814f03b222ea295d081
MD5 cdf948f19635662f3f7fcb8a1dbc1d74
SHA1 4aaf199cd2e84a70a6c33d1241bbe137f64eb75d
SHA512 d2f6ab9c958f0a35d7201eec6219aa321a818767e81e94c03c98ac5c4963f158b49ae095967b52ec7e1ae68563474d61f8baaef8b229cbd27f4350c9348f903a
SSDEEP 49152:ItCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCq:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdf948f19635662f3f7fcb8a1dbc1d74_JaffaCakes118

File Explorer

cdf948f19635662f3f7fcb8a1dbc1d74_JaffaCakes118

.exe 11.5MB

cdf948f19635662f3f7fcb8a1dbc1d74_JaffaCakes118

IMPHASH 688914c09063324d2ce71db515e11995
SHA256 90866ff59fb98f3e2e5e3cfc75a4ca0acb389f3ef9d64814f03b222ea295d081
MD5 cdf948f19635662f3f7fcb8a1dbc1d74
SHA1 4aaf199cd2e84a70a6c33d1241bbe137f64eb75d
SHA512 d2f6ab9c958f0a35d7201eec6219aa321a818767e81e94c03c98ac5c4963f158b49ae095967b52ec7e1ae68563474d61f8baaef8b229cbd27f4350c9348f903a
SSDEEP 49152:ItCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCtCq:
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

98736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\lohove67 vodiholehog\zecoyiyof.pdb

kernel32

ExitProcess GetEnvironmentVariableW FileTimeToDosDateTime CreateTimerQueue SearchPathW InterlockedDecrement AddConsoleAliasW FlushViewOfFile FreeEnvironmentStringsA OutputDebugStringW GetTickCount GenerateConsoleCtrlEvent SetFileShortNameW LoadLibraryW SetSystemTimeAdjustment GetModuleFileNameW CreateActCtxA CompareStringW lstrlenW GetStartupInfoW OpenMutexW FindFirstFileExA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress SetVolumeLabelW SearchPathA _hwrite OpenWaitableTimerA RegisterWaitForSingleObject OpenWaitableTimerW LocalAlloc SetConsoleOutputCP SetCurrentDirectoryW WriteProfileSectionW AddAtomA GetModuleFileNameA WTSGetActiveConsoleSessionId CreateIoCompletionPort GetModuleHandleA QueryMemoryResourceNotification FreeEnvironmentStringsW RequestWakeupLatency FillConsoleOutputAttribute SetProcessShutdownParameters GetVersionExA DeleteFileW CloseHandle CreateFileW GetCommandLineW HeapSetInformation SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedIncrement DecodePointer GetModuleHandleW GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetLastError HeapCreate WriteFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree GetStringTypeW MultiByteToWideChar OutputDebugStringA WriteConsoleW WideCharToMultiByte LCMapStringW IsProcessorFeaturePresent RaiseException SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers

user32

GetMessagePos

Sharing

General

Malware Config

Signatures

File Explorer

cdf948f19635662f3f7fcb8a1dbc1d74_JaffaCakes118

kernel32

user32

generic