d1ceb14f67c000f686aa0017c30bd54a_JaffaCakes118

General

Target
d1ceb14f67c000f686aa0017c30bd54a_JaffaCakes118
Size 593KB
Sample240405-m2bzeaaa5w
SHA256 d89bf052a97ac09968b4832856b1d61c6b659ea74d1de47fec5b85e1a3a1bd9b
MD5 d1ceb14f67c000f686aa0017c30bd54a
SHA1 07f74f6f43bad4d58027a49d50b8e394029a25b1
SHA512 39a03992fda156aaefd24698c9cd534899d9b3053d8d68da70bec563ae2d447ae26fc5850cc0586170791b708116b6f2e8fe77c7db013f69641ab56c55ce094d
SSDEEP 12288:4ifMkq1GyEAYfmZb1ib+RPJWRgEMR3uFySrSrDCPKrWSJh:4ibCGyEPYbMOMGEOuYDCPKt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1ceb14f67c000f686aa0017c30bd54a_JaffaCakes118

File Explorer

d1ceb14f67c000f686aa0017c30bd54a_JaffaCakes118

.exe 593KB

d1ceb14f67c000f686aa0017c30bd54a_JaffaCakes118

IMPHASH bd3694527adf0e2f58ae8cb4e18ad5ae
SHA256 d89bf052a97ac09968b4832856b1d61c6b659ea74d1de47fec5b85e1a3a1bd9b
MD5 d1ceb14f67c000f686aa0017c30bd54a
SHA1 07f74f6f43bad4d58027a49d50b8e394029a25b1
SHA512 39a03992fda156aaefd24698c9cd534899d9b3053d8d68da70bec563ae2d447ae26fc5850cc0586170791b708116b6f2e8fe77c7db013f69641ab56c55ce094d
SSDEEP 12288:4ifMkq1GyEAYfmZb1ib+RPJWRgEMR3uFySrSrDCPKrWSJh:4ibCGyEPYbMOMGEOuYDCPKt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

412272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\venesozozifes_debe71\cem56-fumuye2\non.pdb

kernel32

SearchPathW InterlockedDecrement FindFirstFileExW GetProcessPriorityBoost GetModuleHandleW GetTickCount IsBadReadPtr GetConsoleAliasesLengthA SetFileShortNameW GetSystemTimeAdjustment GetVersionExW GetModuleFileNameW GetEnvironmentVariableA ExitThread lstrlenW GetStartupInfoW GetConsoleOutputCP SetCurrentDirectoryA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA WriteProfileSectionA CopyFileA CreateMemoryResourceNotification GlobalGetAtomNameA _hwrite LoadLibraryA ProcessIdToSessionId OpenWaitableTimerW LocalAlloc MoveFileA GetProcessShutdownParameters FreeEnvironmentStringsW CompareStringA GetFileTime OutputDebugStringA GetWindowsDirectoryW DeleteTimerQueueTimer DeleteFileW AddConsoleAliasA CloseHandle CreateFileW WideCharToMultiByte InterlockedIncrement MultiByteToWideChar InterlockedExchange EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapValidate GetCommandLineW HeapSetInformation GetCPInfo RtlUnwind RaiseException LCMapStringW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount HeapAlloc GetModuleFileNameA GetLastError HeapReAlloc HeapSize HeapQueryInformation HeapFree HeapCreate GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType WriteFile GetStringTypeW GetLocaleInfoW WriteConsoleW OutputDebugStringW LoadLibraryW GetLocaleInfoA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

d1ceb14f67c000f686aa0017c30bd54a_JaffaCakes118

kernel32

user32

generic