ef50f4975feb3c9a3c1db2495fa93d67_JaffaCakes118

General

Target
ef50f4975feb3c9a3c1db2495fa93d67_JaffaCakes118
Size 487KB
Sample240414-x2ltqaec5s
SHA256 e9ed67144c3667a22eb477938b1d0ea60de36ef6bc06dc01640d317937fdfa41
MD5 ef50f4975feb3c9a3c1db2495fa93d67
SHA1 41d64f46caedc56edb2787a5112b70244b5b4419
SHA512 ff1bef75b85687d8dead94bad7e9abfa67b56a3372346d79ed9024646126ba352d23b5b177f21460a7e60129dfab9c331668c466b34498845b07fa664d87bd0c
SSDEEP 12288:IxItLjwF1wGmYXAvxd0C/ZKv+6rSjKHybJs34:7SFe0wvxd9/ZBDbJs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef50f4975feb3c9a3c1db2495fa93d67_JaffaCakes118

File Explorer

ef50f4975feb3c9a3c1db2495fa93d67_JaffaCakes118

.exe 487KB

ef50f4975feb3c9a3c1db2495fa93d67_JaffaCakes118

IMPHASH 9ed1d013ce7207f0483aa63315aab3fd
SHA256 e9ed67144c3667a22eb477938b1d0ea60de36ef6bc06dc01640d317937fdfa41
MD5 ef50f4975feb3c9a3c1db2495fa93d67
SHA1 41d64f46caedc56edb2787a5112b70244b5b4419
SHA512 ff1bef75b85687d8dead94bad7e9abfa67b56a3372346d79ed9024646126ba352d23b5b177f21460a7e60129dfab9c331668c466b34498845b07fa664d87bd0c
SSDEEP 12288:IxItLjwF1wGmYXAvxd0C/ZKv+6rSjKHybJs34:7SFe0wvxd9/ZBDbJs
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8109

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\losirajokupam\70\xirile\ci.pdb

kernel32

GetDefaultCommConfigW WriteConsoleOutputW HeapAlloc EndUpdateResourceW InterlockedIncrement GetCurrentProcess SetEnvironmentVariableW GetEnvironmentStringsW AddConsoleAliasW EnumCalendarInfoExW GetConsoleAliasesLengthA GetConsoleTitleA WriteFile GetUserDefaultLangID GetEnvironmentStrings GlobalAlloc SetVolumeMountPointA GetSystemWindowsDirectoryA lstrcpynW VerifyVersionInfoA GetModuleFileNameW GetACP LCMapStringA GetCPInfoExW GetProcAddress GetComputerNameExW CreateTimerQueueTimer FreeUserPhysicalPages EnterCriticalSection VerLanguageNameW GetLocalTime LoadLibraryA GetCurrentConsoleFont WaitForMultipleObjects VirtualProtect PeekConsoleInputA FindFirstVolumeA GetVersionExA ReadConsoleInputW GetVersion DeleteTimerQueueTimer CreateThread CreateFileA HeapQueryInformation GetCommandLineW SetStdHandle SetFilePointer WideCharToMultiByte InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW GetCPInfo RtlUnwind LCMapStringW GetStringTypeW GetStdHandle GetModuleFileNameA HeapCreate VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

ClientToScreen RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

ef50f4975feb3c9a3c1db2495fa93d67_JaffaCakes118

kernel32

user32

generic