e5804762a27e381585dd592dc15ffd89_JaffaCakes118

General

Target
e5804762a27e381585dd592dc15ffd89_JaffaCakes118
Size 320KB
Sample240407-wckppaab3y
SHA256 d6759d62c64ebcfe83041fd0c336ed7e2f1d8ba44ad409de4313b0b029250ba2
MD5 e5804762a27e381585dd592dc15ffd89
SHA1 79f45d7c5a0eec4e281522fe6b3c610359517a54
SHA512 dbb653d8167aa5d926d6e958ce7e23adba4690b89e2da8e447c0287f9bda54482046ce666c8745b029dbb3ab1fab1a72f804b925e51c0f921f07c3139cc28f9d
SSDEEP 6144:JTNs2iJdoIm/MZWepYPbzXIzvkelXB+CjH4JAnRwoOL9:fsxcf/EWPIbn+CjYJARwoOR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5804762a27e381585dd592dc15ffd89_JaffaCakes118

File Explorer

e5804762a27e381585dd592dc15ffd89_JaffaCakes118

.exe 320KB

e5804762a27e381585dd592dc15ffd89_JaffaCakes118

IMPHASH 3e335ab1bd48187462dff6eb1356956c
SHA256 d6759d62c64ebcfe83041fd0c336ed7e2f1d8ba44ad409de4313b0b029250ba2
MD5 e5804762a27e381585dd592dc15ffd89
SHA1 79f45d7c5a0eec4e281522fe6b3c610359517a54
SHA512 dbb653d8167aa5d926d6e958ce7e23adba4690b89e2da8e447c0287f9bda54482046ce666c8745b029dbb3ab1fab1a72f804b925e51c0f921f07c3139cc28f9d
SSDEEP 6144:JTNs2iJdoIm/MZWepYPbzXIzvkelXB+CjH4JAnRwoOL9:fsxcf/EWPIbn+CjYJARwoOR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

169607

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wotozimake\cutefegoh\webiduraj\gukamuj65 b.pdb

kernel32

EnterCriticalSection GetConsoleAliasesLengthA InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExW WriteConsoleInputW ReadConsoleInputW InterlockedPopEntrySList SetConsoleDisplayMode WriteConsoleA GetConsoleCP VerifyVersionInfoW CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionA EnumDateFormatsExA CancelTimerQueueTimer LoadLibraryA FlushInstructionCache SetConsoleCP FindFirstVolumeA ReadFile BuildCommDCBW VerLanguageNameW SetFileApisToANSI WriteProcessMemory LeaveCriticalSection SetEvent GetExitCodeThread EndUpdateResourceA GetCPInfoExA GetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx AddRefActCtx HeapUnlock DnsHostnameToComputerNameA ReadConsoleOutputW GlobalFindAtomW GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA IsWow64Process UnmapViewOfFile GetAtomNameW HeapSize GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetProcessAffinityMask WaitForSingleObject SetConsoleCursorInfo VerifyVersionInfoA WriteConsoleOutputCharacterA GetFileAttributesExW GetComputerNameA CommConfigDialogW GetConsoleAliasA GetSystemTimeAsFileTime GetDiskFreeSpaceW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection RaiseException RtlUnwind HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType SetFilePointer HeapCreate VirtualFree VirtualAlloc ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

user32

GetAltTabInfoA RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

e5804762a27e381585dd592dc15ffd89_JaffaCakes118

kernel32

user32

generic