ed3379f3fafe77973058a6b8e02d2e1e_JaffaCakes118

General

Target
ed3379f3fafe77973058a6b8e02d2e1e_JaffaCakes118
Size 525KB
Sample240411-mf993scf8s
SHA256 8b3c9cd19c312c6a1578e6ac26658e1d47ee7dbe7ae319c49c8c2894c58f73ed
MD5 ed3379f3fafe77973058a6b8e02d2e1e
SHA1 f04bffac54ee8b5603134ef6dc36ecdd82c71e92
SHA512 27a0ec59070df8ddb97e40e194119fe5d9c4d026470d2eedec30c31c5e7171b7159c21e83e26dabfc47f30ee8f980eda0d72bb99cae461ffffc951890736698a
SSDEEP 12288:+xx2/Q1zPC7AA9OMr2ANXRVc0W3fAfq4qtn4Tcy9ZTjxC:fQ1ztF4a0W3l4Qy9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed3379f3fafe77973058a6b8e02d2e1e_JaffaCakes118

File Explorer

ed3379f3fafe77973058a6b8e02d2e1e_JaffaCakes118

.exe 525KB

ed3379f3fafe77973058a6b8e02d2e1e_JaffaCakes118

IMPHASH ab6a8b01372d51e7fed6c22dcfc42852
SHA256 8b3c9cd19c312c6a1578e6ac26658e1d47ee7dbe7ae319c49c8c2894c58f73ed
MD5 ed3379f3fafe77973058a6b8e02d2e1e
SHA1 f04bffac54ee8b5603134ef6dc36ecdd82c71e92
SHA512 27a0ec59070df8ddb97e40e194119fe5d9c4d026470d2eedec30c31c5e7171b7159c21e83e26dabfc47f30ee8f980eda0d72bb99cae461ffffc951890736698a
SSDEEP 12288:+xx2/Q1zPC7AA9OMr2ANXRVc0W3fAfq4qtn4Tcy9ZTjxC:fQ1ztF4a0W3l4Qy9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8160

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vexocimo\xusoxevod50\zuta\xapuza firayog\xox\11\fa.pdb

kernel32

GetCommandLineW FileTimeToDosDateTime SetThreadContext GetNativeSystemInfo SetFilePointer lstrlenA CopyFileExW TlsGetValue InterlockedIncrement GetQueuedCompletionStatus GetCommState InterlockedDecrement GetSystemWindowsDirectoryW GlobalLock WaitForSingleObject SetEvent OpenSemaphoreA FreeEnvironmentStringsA GetTickCount CreateNamedPipeW VirtualFree GetConsoleAliasesLengthA GetDriveTypeA GetPriorityClass LoadLibraryW GetConsoleMode TerminateThread GetVersionExW SetConsoleMode SetConsoleCursorPosition ReadFile GetOverlappedResult CompareStringW GetStartupInfoW GetNamedPipeHandleStateW GetPrivateProfileIntW CreateDirectoryA GetFileSizeEx GetLastError IsDBCSLeadByteEx ReadConsoleOutputCharacterA GetProcAddress CopyFileA GetPrivateProfileStringA LoadLibraryA OpenMutexA LocalAlloc IsSystemResumeAutomatic SetCurrentDirectoryW WriteProfileSectionW HeapWalk SetNamedPipeHandleState Process32NextW SetConsoleTitleW FindFirstChangeNotificationA FreeEnvironmentStringsW EnumResourceNamesA FatalAppExitA GetCurrentThreadId GetCPInfoExA FindAtomW GetSystemTime LCMapStringW DeleteFileA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess GetModuleFileNameA WriteFile GetStdHandle TlsAlloc TlsSetValue TlsFree SetLastError TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte GetConsoleCP DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle GetModuleHandleA

user32

GetTitleBarInfo

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

ed3379f3fafe77973058a6b8e02d2e1e_JaffaCakes118

kernel32

user32

winhttp

generic