efd9d8e58f45431d7608295b0425de25_JaffaCakes118

General

Target
efd9d8e58f45431d7608295b0425de25_JaffaCakes118
Size 471KB
Sample240415-ajbjpsca7z
SHA256 7d5a52529f559487fc8b8f960b9427fa75e71d33a7e88d682700ec095dd8158e
MD5 efd9d8e58f45431d7608295b0425de25
SHA1 412c07b2952d82711a937c9a82857638cba7f235
SHA512 115297e73dd8d38973c273fa615f13345cd91feef9b7504f774e41b04a9ae0e4cf7172baceed2c753c043aac28789a8b77422bebdef632148456a34989fc99f3
SSDEEP 6144:0TgeHZxyGpoque8iEVfJ55wQBPJO2vKSEfJDbbopB0hkvVS9PZzZdnu2efCgxLy7:0s0ZbCXA/HTJvavYP5ZdMfvyk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efd9d8e58f45431d7608295b0425de25_JaffaCakes118

File Explorer

efd9d8e58f45431d7608295b0425de25_JaffaCakes118

.exe 471KB

efd9d8e58f45431d7608295b0425de25_JaffaCakes118

IMPHASH 52c37101f2973085af5ed972e3b0d2d3
SHA256 7d5a52529f559487fc8b8f960b9427fa75e71d33a7e88d682700ec095dd8158e
MD5 efd9d8e58f45431d7608295b0425de25
SHA1 412c07b2952d82711a937c9a82857638cba7f235
SHA512 115297e73dd8d38973c273fa615f13345cd91feef9b7504f774e41b04a9ae0e4cf7172baceed2c753c043aac28789a8b77422bebdef632148456a34989fc99f3
SSDEEP 6144:0TgeHZxyGpoque8iEVfJ55wQBPJO2vKSEfJDbbopB0hkvVS9PZzZdnu2efCgxLy7:0s0ZbCXA/HTJvavYP5ZdMfvyk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

343047

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wiculicupadipe\lorep\36-relulifiwec wicizezam.pdb

kernel32

InterlockedPopEntrySList EnumDateFormatsW LeaveCriticalSection GetConsoleAliasesLengthA CreateTapePartition GetLongPathNameW GetUserDefaultLangID AddRefActCtx GetCPInfoExA WriteConsoleInputW ReadConsoleInputW GetTapeParameters WaitCommEvent GetNumaNodeProcessorMask GetConsoleCP VerifyVersionInfoA WaitNamedPipeW CreateMutexA WriteConsoleW GetLastError CreateFileA DeleteFileW WritePrivateProfileSectionA GetPrivateProfileSectionW EnumDateFormatsExW SetStdHandle LoadLibraryW IsDebuggerPresent FindFirstVolumeW WriteFile BuildCommDCBW FindActCtxSectionStringW VerLanguageNameW AreFileApisANSI WriteProcessMemory RequestWakeupLatency PeekConsoleInputA SetEvent IsBadReadPtr Sleep WaitForSingleObject LoadResource GetCPInfo FreeConsole SetConsoleCtrlHandler SetConsoleTitleW GetCurrentConsoleFont SetConsoleTextAttribute AttachConsole GetConsoleAliasesLengthW ReadConsoleA ReadConsoleOutputW GetSystemWindowsDirectoryW GetStringTypeW BuildCommDCBAndTimeoutsW HeapUnlock HeapLock GetAtomNameW HeapReAlloc HeapCompact GetGeoInfoW GetCurrentProcess GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetOEMCP WaitForMultipleObjects VerifyVersionInfoW WriteConsoleOutputCharacterA LocalAlloc SetMailslotInfo GetCPInfoExW SetEnvironmentVariableW SetCalendarInfoA GetComputerNameW GetConsoleWindow PostQueuedCompletionStatus SetFileApisToOEM GetStringTypeA HeapSize GetDiskFreeSpaceA GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetStdHandle GetModuleFileNameA DeleteCriticalSection EnterCriticalSection TerminateProcess LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc GetACP IsValidCodePage RtlUnwind GetLocaleInfoA GetConsoleMode FlushFileBuffers MultiByteToWideChar LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

efd9d8e58f45431d7608295b0425de25_JaffaCakes118

kernel32

generic