edc060932eab71ee1990e79a30999b2f_JaffaCakes118

General

Target
edc060932eab71ee1990e79a30999b2f_JaffaCakes118
Size 670KB
Sample240411-sxt73she8w
SHA256 fc88fe29755c931864c4f068bb439637f259220ba0f6d54de0d1298b790181f6
MD5 edc060932eab71ee1990e79a30999b2f
SHA1 8ad274131ff11f58e894bf238d866b822150e511
SHA512 a3be88ae1adcb79c6f257520cfc909ed632894783821bd5bb6cccc48773a267fba41550fcb954f493543e105aed152d73e8c7dbb43e0df6e84b7086a8a69c673
SSDEEP 12288:/X/i67DCzMebmibKTGrZ3Jg+oMGIsuIdoEaRx5Cc7cY5AypgR7lMxVd:/X/zn/yNJZ+9IsuaoEwx5Cc7cY5Aypgm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edc060932eab71ee1990e79a30999b2f_JaffaCakes118

File Explorer

edc060932eab71ee1990e79a30999b2f_JaffaCakes118

.exe 670KB

edc060932eab71ee1990e79a30999b2f_JaffaCakes118

IMPHASH fbf6fe068e8d19266946ada342b837cd
SHA256 fc88fe29755c931864c4f068bb439637f259220ba0f6d54de0d1298b790181f6
MD5 edc060932eab71ee1990e79a30999b2f
SHA1 8ad274131ff11f58e894bf238d866b822150e511
SHA512 a3be88ae1adcb79c6f257520cfc909ed632894783821bd5bb6cccc48773a267fba41550fcb954f493543e105aed152d73e8c7dbb43e0df6e84b7086a8a69c673
SSDEEP 12288:/X/i67DCzMebmibKTGrZ3Jg+oMGIsuIdoEaRx5Cc7cY5AypgR7lMxVd:/X/zn/yNJZ+9IsuaoEwx5Cc7cY5Aypgm
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

348855

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\repezewoyey.pdb

kernel32

CreateActCtxW WriteConsoleInputA GetConsoleAliasesW SetCriticalSectionSpinCount OpenEventA HeapAlloc GetUserDefaultLangID VirtualAlloc EnumDateFormatsA GetOEMCP CreateMutexW WaitForSingleObject GetModuleHandleW LocalAlloc SetMailslotInfo GetFileAttributesExW GetConsoleWindow CancelTimerQueueTimer CreateJobObjectA GetTempPathA GetProcessHeap CompareStringW HeapQueryInformation InitializeSListHead InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException RtlUnwind GetLastError HeapReAlloc GetCommandLineA GetStartupInfoA HeapFree GetProcAddress GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA LCMapStringA LCMapStringW

advapi32

BackupEventLogA

winhttp

WinHttpQueryOption

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

edc060932eab71ee1990e79a30999b2f_JaffaCakes118

kernel32

advapi32

winhttp

generic