e8b5f09ad7c68d18049b74d7eef0ed5b_JaffaCakes118

General

Target
e8b5f09ad7c68d18049b74d7eef0ed5b_JaffaCakes118
Size 491KB
Sample240408-3ph5ysaf6t
SHA256 27a502c17f81e1672e1d6cedd29376d3fa8bd20019788f733663b5fbb14097ac
MD5 e8b5f09ad7c68d18049b74d7eef0ed5b
SHA1 4fb7ad19c7e5f76b27b0f917fc67a83bee30ab05
SHA512 6d9c8e58011db17b8c5d2c3501d18abbbae390a352bdd0c280b79f9678a36afce17596de380d613ce64c7edeb8238a6ea9614b8ae566bba4105bd7fec0e61134
SSDEEP 12288:t6wsJt42uTnHHFGA+/08c7sZB0hcJbt+8paPSx0v1Hc9c:/ssjFGt0D7sDjJbt+8IU0vZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8b5f09ad7c68d18049b74d7eef0ed5b_JaffaCakes118

File Explorer

e8b5f09ad7c68d18049b74d7eef0ed5b_JaffaCakes118

.exe 491KB

e8b5f09ad7c68d18049b74d7eef0ed5b_JaffaCakes118

IMPHASH afec05664b511fad431e988e2a228505
SHA256 27a502c17f81e1672e1d6cedd29376d3fa8bd20019788f733663b5fbb14097ac
MD5 e8b5f09ad7c68d18049b74d7eef0ed5b
SHA1 4fb7ad19c7e5f76b27b0f917fc67a83bee30ab05
SHA512 6d9c8e58011db17b8c5d2c3501d18abbbae390a352bdd0c280b79f9678a36afce17596de380d613ce64c7edeb8238a6ea9614b8ae566bba4105bd7fec0e61134
SSDEEP 12288:t6wsJt42uTnHHFGA+/08c7sZB0hcJbt+8paPSx0v1Hc9c:/ssjFGt0D7sDjJbt+8IU0vZ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8362

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\saduy49\koyewajohidix\pazelucinefaxi-lajadane6.pdb

kernel32

GetConsoleAliasesLengthW GetCPInfo HeapAlloc InterlockedIncrement _lwrite GetCurrentProcess SetEnvironmentVariableW GetEnvironmentStringsW GetUserDefaultLCID SetVolumeMountPointW GetConsoleTitleA GetUserDefaultLangID GetEnvironmentStrings GlobalAlloc GetSystemWindowsDirectoryA WriteConsoleOutputA GetVersionExW lstrcpynW HeapQueryInformation ReadFile GetModuleFileNameW lstrlenA GetCPInfoExW ChangeTimerQueueTimer GetProcAddress PeekConsoleInputW GetComputerNameExW VerLanguageNameA CreateTimerQueueTimer FreeUserPhysicalPages EnterCriticalSection BuildCommDCBW GetLocalTime LoadLibraryA BeginUpdateResourceA GetCurrentConsoleFont WaitForMultipleObjects GetDefaultCommConfigA VirtualProtect FindFirstVolumeA ReadConsoleInputW GetVersion AddConsoleAliasA EnumCalendarInfoExA LCMapStringW CreateThread CreateFileA VerifyVersionInfoW GetCommandLineW SetStdHandle WriteConsoleW WideCharToMultiByte InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW RtlUnwind LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP

user32

RealGetWindowClassA GetCaretPos

Sharing

General

Malware Config

Signatures

File Explorer

e8b5f09ad7c68d18049b74d7eef0ed5b_JaffaCakes118

kernel32

user32

generic