e99afcbb149ba6dfbdd90c034b88fe73_JaffaCakes118

General

Target
e99afcbb149ba6dfbdd90c034b88fe73_JaffaCakes118
Size 422KB
Sample240409-kprg8aba62
SHA256 924b9935b1f2be85aa36e0158f0a55c1200cdf9046077a5b491f1aeb034c2353
MD5 e99afcbb149ba6dfbdd90c034b88fe73
SHA1 be974111ad0a8f3870d09706ea07b5438f418798
SHA512 bf8b1f544ab9e689068f94b7ee5cfbe304b3756308d022be2e487216dd01aed0fcc2ac76e5d6b4c2f434a1125a88d5c71a2ecdafdb7bddd82447e77601c6b4a9
SSDEEP 6144:RyZ0UFc6AvAEvuGmqJgMTt7/xOk3WFa0Gh/AA02VC35RXb6uAU2dc56wge5JqtbB:day4EvuWd+kv02c35RrcdcIEUVKZc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e99afcbb149ba6dfbdd90c034b88fe73_JaffaCakes118

File Explorer

e99afcbb149ba6dfbdd90c034b88fe73_JaffaCakes118

.exe 422KB

e99afcbb149ba6dfbdd90c034b88fe73_JaffaCakes118

IMPHASH 0336658842541b9e17744ccc2800922a
SHA256 924b9935b1f2be85aa36e0158f0a55c1200cdf9046077a5b491f1aeb034c2353
MD5 e99afcbb149ba6dfbdd90c034b88fe73
SHA1 be974111ad0a8f3870d09706ea07b5438f418798
SHA512 bf8b1f544ab9e689068f94b7ee5cfbe304b3756308d022be2e487216dd01aed0fcc2ac76e5d6b4c2f434a1125a88d5c71a2ecdafdb7bddd82447e77601c6b4a9
SSDEEP 6144:RyZ0UFc6AvAEvuGmqJgMTt7/xOk3WFa0Gh/AA02VC35RXb6uAU2dc56wge5JqtbB:day4EvuWd+kv02c35RrcdcIEUVKZc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10723

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sajeh.pdb

kernel32

lstrlenA GetCPInfo GetDefaultCommConfigW HeapAlloc _lwrite InterlockedDecrement GetCurrentProcess GetSystemWindowsDirectoryW GetUserDefaultLCID SetConsoleScreenBufferSize SetVolumeMountPointW GetCommandLineA GetEnvironmentStrings ReadConsoleInputA WriteConsoleOutputA GetVersionExW GetComputerNameExA lstrcpynW GetFileAttributesW LocalReAlloc CreateTimerQueue ReadFile GetModuleFileNameW GetCPInfoExW ChangeTimerQueueTimer GetProcAddress AttachConsole PeekConsoleInputW VerLanguageNameA FreeUserPhysicalPages GetLocalTime LoadLibraryA BeginUpdateResourceA GetCurrentConsoleFont SetEnvironmentVariableA GetConsoleTitleW BuildCommDCBA VirtualProtect FindFirstVolumeA ReleaseMutex GetVersion AddConsoleAliasA EnumCalendarInfoExA LCMapStringW CreateThread CreateFileA SetStdHandle HeapQueryInformation GetSystemDefaultLangID WriteConsoleW GetConsoleOutputCP InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA

user32

RealGetWindowClassA GetCaretPos

Sharing

General

Malware Config

Signatures

File Explorer

e99afcbb149ba6dfbdd90c034b88fe73_JaffaCakes118

kernel32

user32

generic