eec17d7948e06d67503dea34259145f2_JaffaCakes118

General

Target
eec17d7948e06d67503dea34259145f2_JaffaCakes118
Size 468KB
Sample240412-bbb1yadf4s
SHA256 d339a24a1fd6245cefc38b24ce8ff753a1dc20bc6d213bf38bb8703a7c527042
MD5 eec17d7948e06d67503dea34259145f2
SHA1 ce3ff6d3b66de29f2568daca2e43d01b70cc1f00
SHA512 92c6106e63dce226120760c74dbdac308ff9a3ff2bd4273f4ee3e805b85b3980fb4992565680b86e6258bd056c7d3e3464a2fea5d4ef86d72ef3fb7c89b6cc5e
SSDEEP 12288:47cdIY0t2Imo15ZNJqemMV+TFnYmARlA:47GIY0t5mo1FJs/JnY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eec17d7948e06d67503dea34259145f2_JaffaCakes118

File Explorer

eec17d7948e06d67503dea34259145f2_JaffaCakes118

.exe 468KB

eec17d7948e06d67503dea34259145f2_JaffaCakes118

IMPHASH 629ade9afe4dde1eb664e78b28e49fc1
SHA256 d339a24a1fd6245cefc38b24ce8ff753a1dc20bc6d213bf38bb8703a7c527042
MD5 eec17d7948e06d67503dea34259145f2
SHA1 ce3ff6d3b66de29f2568daca2e43d01b70cc1f00
SHA512 92c6106e63dce226120760c74dbdac308ff9a3ff2bd4273f4ee3e805b85b3980fb4992565680b86e6258bd056c7d3e3464a2fea5d4ef86d72ef3fb7c89b6cc5e
SSDEEP 12288:47cdIY0t2Imo15ZNJqemMV+TFnYmARlA:47GIY0t5mo1FJs/JnY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

359654

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nulerojokote96\robexe\cutabasowahiyu-zapi.pdb

kernel32

InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExA WriteConsoleInputW ReadConsoleInputA InitializeSListHead SetConsoleDisplayMode WriteConsoleA VerifyVersionInfoW CreateFileA WritePrivateProfileSectionA GetPrivateProfileSectionA EnumDateFormatsExA DeleteTimerQueue LoadLibraryW VirtualFree SetConsoleCP FindFirstVolumeA ReadFile BuildCommDCBW VerLanguageNameA SetFileApisToANSI GetConsoleCP LeaveCriticalSection SetEvent GetExitCodeThread EndUpdateResourceW SetLastError UpdateResourceA SetConsoleTitleW GetFileTime LoadLibraryExA CopyFileW GetConsoleAliasesLengthW ReadConsoleA ZombifyActCtx CreateActCtxW HeapUnlock DnsHostnameToComputerNameA ReadConsoleOutputA GlobalFindAtomW GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleW CreateThread GetVersionExA GetProcessAffinityMask WaitForSingleObject SetConsoleCursorPosition VerifyVersionInfoA lstrlenA WriteConsoleOutputCharacterW GetFileAttributesExA GetComputerNameA SetCriticalSectionSpinCount GetConsoleAliasA GetSystemTime GetDiskFreeSpaceW CloseHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle LoadLibraryA GetConsoleMode FlushFileBuffers GetLocaleInfoW GetConsoleOutputCP WriteConsoleW

user32

GetAltTabInfoW RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

eec17d7948e06d67503dea34259145f2_JaffaCakes118

kernel32

user32

generic