ee70f01d13a439e1c1c989d4d9a098ba_JaffaCakes118

General

Target
ee70f01d13a439e1c1c989d4d9a098ba_JaffaCakes118
Size 575KB
Sample240411-1xpatsed74
SHA256 336b73345346ecc0c06d050402fba00e1301be6c4989b448e7cc11c967722d7c
MD5 ee70f01d13a439e1c1c989d4d9a098ba
SHA1 a0666179e5326c622663fbcd86c09f6c9154896a
SHA512 32218f3126ca08d2b4070b71ae395b888427bca63d699983fd9fac3570a8437d8e171358f50c029d51e58362902437e5c1b3111b58dfe4845a1a9e3a47570c62
SSDEEP 12288:753MF7bR595vaJjI0zkvdOxOD1udmCKRKxuaX59Y:76R595vaJI0zkvsOD14mZRX1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee70f01d13a439e1c1c989d4d9a098ba_JaffaCakes118

File Explorer

ee70f01d13a439e1c1c989d4d9a098ba_JaffaCakes118

.exe 575KB

ee70f01d13a439e1c1c989d4d9a098ba_JaffaCakes118

IMPHASH 451c17c19158849d8a13a33ee740b7fa
SHA256 336b73345346ecc0c06d050402fba00e1301be6c4989b448e7cc11c967722d7c
MD5 ee70f01d13a439e1c1c989d4d9a098ba
SHA1 a0666179e5326c622663fbcd86c09f6c9154896a
SHA512 32218f3126ca08d2b4070b71ae395b888427bca63d699983fd9fac3570a8437d8e171358f50c029d51e58362902437e5c1b3111b58dfe4845a1a9e3a47570c62
SSDEEP 12288:753MF7bR595vaJjI0zkvdOxOD1udmCKRKxuaX59Y:76R595vaJI0zkvsOD14mZRX1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

17446

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sukimimomefuf\lokopekipaho\tedexowol.pdb

kernel32

CreateTimerQueue SetLocalTime GetDefaultCommConfigW EndUpdateResourceW InterlockedIncrement GetSystemWindowsDirectoryW SetEnvironmentVariableW GetEnvironmentStringsW AddConsoleAliasW EnumCalendarInfoExW GetConsoleTitleA ReadConsoleW WriteFile GetUserDefaultLangID GetEnvironmentStrings GlobalAlloc SetVolumeMountPointA WriteConsoleOutputA lstrcpynW HeapReAlloc VerifyVersionInfoA HeapQueryInformation GetModuleFileNameW GetACP LCMapStringA GetProcAddress GetComputerNameExW FreeUserPhysicalPages EnterCriticalSection VerLanguageNameW WaitForMultipleObjects GetModuleHandleA VirtualProtect PeekConsoleInputA GetCPInfoExA GetVersionExA ReadConsoleInputW GetVersion DeleteTimerQueueTimer GetCurrentProcessId FindNextVolumeA CreateThread CreateFileA PulseEvent GetCommandLineW WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringW GetStringTypeW GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameA HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize FreeEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetStringTypeA GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

RealGetWindowClassA ScreenToClient

Sharing

General

Malware Config

Signatures

File Explorer

ee70f01d13a439e1c1c989d4d9a098ba_JaffaCakes118

kernel32

user32

generic