e2b46439ae09a3b7a4250d848c7b7265_JaffaCakes118

General

Target
e2b46439ae09a3b7a4250d848c7b7265_JaffaCakes118
Size 313KB
Sample240406-reyxwaca4w
SHA256 e0c8cc8c66b2d57aa27efa5eb8be1331934645b12bfbe26c5fdab271f1c94bc4
MD5 e2b46439ae09a3b7a4250d848c7b7265
SHA1 b1dd7e352c779651fcce756e0a4a6d78ac08c87a
SHA512 e5d419bd44b94b521ae8e63d90b3c3621288063dbfc908d50826e857abb61b512fd4a677f4d8e281b54c3cc105c8b8dc49459a4eaae42e4b4fc935fda0d1df31
SSDEEP 6144:keKv6F664O2/Oex5YpKQsR0POMAwmNoTUHvRwWLJNVst+SOTx1:5w64J/OjpAR8pfTUPRwaqtI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2b46439ae09a3b7a4250d848c7b7265_JaffaCakes118

File Explorer

e2b46439ae09a3b7a4250d848c7b7265_JaffaCakes118

.exe 313KB

e2b46439ae09a3b7a4250d848c7b7265_JaffaCakes118

IMPHASH 235315ed783e15a9f0262d40cb1ad6da
SHA256 e0c8cc8c66b2d57aa27efa5eb8be1331934645b12bfbe26c5fdab271f1c94bc4
MD5 e2b46439ae09a3b7a4250d848c7b7265
SHA1 b1dd7e352c779651fcce756e0a4a6d78ac08c87a
SHA512 e5d419bd44b94b521ae8e63d90b3c3621288063dbfc908d50826e857abb61b512fd4a677f4d8e281b54c3cc105c8b8dc49459a4eaae42e4b4fc935fda0d1df31
SSDEEP 6144:keKv6F664O2/Oex5YpKQsR0POMAwmNoTUHvRwWLJNVst+SOTx1:5w64J/OjpAR8pfTUPRwaqtI
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nun\vipodutelamuso\19 nesararepi\vezuse-dacuhaxogonugi wujix.pdb

kernel32

GetCommandLineW GetFileSize GetNativeSystemInfo lstrlenA TlsGetValue GetStringTypeA SetLocalTime FindResourceExW InterlockedIncrement GetQueuedCompletionStatus ReadConsoleA GetNamedPipeHandleStateA GlobalLock FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetSystemTimeAsFileTime GetPrivateProfileStringW WriteFile SetCommState GlobalAlloc LoadLibraryW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetExitCodeProcess IsDBCSLeadByte ReadFile GetStartupInfoW GlobalUnlock GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc CopyFileA LoadLibraryA CreateSemaphoreW SetCurrentDirectoryW HeapWalk FindAtomA Process32NextW FreeEnvironmentStringsW EnumResourceNamesA GetCurrentThreadId GetCPInfoExA DeleteFileW CopyFileExA MultiByteToWideChar GetCommandLineA HeapValidate IsBadReadPtr RaiseException LeaveCriticalSection EnterCriticalSection SetStdHandle GetFileType WideCharToMultiByte GetConsoleCP GetConsoleMode DeleteCriticalSection GetModuleFileNameW InterlockedDecrement GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsSetValue TlsFree SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent HeapSize HeapReAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer RtlUnwind DebugBreak OutputDebugStringA OutputDebugStringW LCMapStringW GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

e2b46439ae09a3b7a4250d848c7b7265_JaffaCakes118

kernel32

generic