efab4862b0b3404b81cc5371de21a09a_JaffaCakes118

General

Target
efab4862b0b3404b81cc5371de21a09a_JaffaCakes118
Size 521KB
Sample240414-2hjbpsff57
SHA256 ec9fa2a359946a754445620e8c9ad1eb5bdd24c3630bc3fa600c13fa59664aaa
MD5 efab4862b0b3404b81cc5371de21a09a
SHA1 082590970252fd6c4fa3fb6a2ba61c59658adbd6
SHA512 3a83b1647df53c6251d258d03ab2aa270ec77159164249ba0a03b7a71c353ea23e2da60193aeea476ac4554a0f6db7bd85357de9ce2fbfd9a49fb2842960e1bb
SSDEEP 12288:cUmN5bbCs0t0EiY1G22luxs0O3DGfP4wqnTJfHN:cZEiY1Suxs0O3M4wqnVt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efab4862b0b3404b81cc5371de21a09a_JaffaCakes118

File Explorer

efab4862b0b3404b81cc5371de21a09a_JaffaCakes118

.exe 521KB

efab4862b0b3404b81cc5371de21a09a_JaffaCakes118

IMPHASH 7e10d8f3c6a91a68257beb0c2e7d22cd
SHA256 ec9fa2a359946a754445620e8c9ad1eb5bdd24c3630bc3fa600c13fa59664aaa
MD5 efab4862b0b3404b81cc5371de21a09a
SHA1 082590970252fd6c4fa3fb6a2ba61c59658adbd6
SHA512 3a83b1647df53c6251d258d03ab2aa270ec77159164249ba0a03b7a71c353ea23e2da60193aeea476ac4554a0f6db7bd85357de9ce2fbfd9a49fb2842960e1bb
SSDEEP 12288:cUmN5bbCs0t0EiY1G22luxs0O3DGfP4wqnTJfHN:cZEiY1Suxs0O3M4wqnVt
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

12807

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jbiqj\zdonlt\tvqc\99c0f6769a614c6baf8f06bb2cde228f\ecccnk\rvezbffr\Release\rvezbffr.pdb

kernel32

GetLastError HeapAlloc HeapFree GetProcessHeap SetEvent WaitForSingleObject CreateEventW ExitProcess CreateThread VirtualAlloc GetModuleFileNameW GetModuleHandleA WriteFile LoadLibraryA lstrcpyW lstrlenW CompareStringW MultiByteToWideChar EnumTimeFormatsW GetThreadLocale GetUserDefaultLangID WriteConsoleW ReadConsoleW CloseHandle HeapReAlloc ReadFile CreateFileW GetProcAddress GetCommandLineW HeapSize SetFilePointerEx GetFileSizeEx QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess InterlockedPushEntrySList InterlockedFlushSList RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException GetStdHandle GetModuleHandleExW GetCurrentThread GetDateFormatW GetTimeFormatW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW SetConsoleCtrlHandler FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer

user32

MessageBoxW LoadStringW

advapi32

SetServiceStatus RegisterServiceCtrlHandlerA StartServiceCtrlDispatcherA

ole32

CoUninitialize CoInitializeEx

Sharing

General

Malware Config

Signatures

File Explorer

efab4862b0b3404b81cc5371de21a09a_JaffaCakes118

kernel32

user32

advapi32

ole32

generic