f01851ea050f82906d3b3c97fb7e3b6b_JaffaCakes118

General

Target
f01851ea050f82906d3b3c97fb7e3b6b_JaffaCakes118
Size 456KB
Sample240415-c2jddacc99
SHA256 37a00ba7c6cafe06ee8e908a1a954a7b1669b75255975289105845a81901ea71
MD5 f01851ea050f82906d3b3c97fb7e3b6b
SHA1 b46b97077a32d7ca799db127cd6b100c2c775b31
SHA512 ed4cc32c419f27ac33446a168e7949006b1a08a24008796e2c4dd49ead24d86f70c74a4a66fc8aced1535fdd8c4f4797bdd06566abb49e77bcc509cac58f4139
SSDEEP 6144:jVvldIZKPOVHEikXWg4DW1BAaj+A/bT7j6J0H62Oi9OVtkWCnfM2cCck2cxb:jCTHVW1qm+6Tf6Jw62ObVGfMocvcF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f01851ea050f82906d3b3c97fb7e3b6b_JaffaCakes118

File Explorer

f01851ea050f82906d3b3c97fb7e3b6b_JaffaCakes118

.exe 456KB

f01851ea050f82906d3b3c97fb7e3b6b_JaffaCakes118

IMPHASH bd3c9edf948deca79ee5e78523f1a042
SHA256 37a00ba7c6cafe06ee8e908a1a954a7b1669b75255975289105845a81901ea71
MD5 f01851ea050f82906d3b3c97fb7e3b6b
SHA1 b46b97077a32d7ca799db127cd6b100c2c775b31
SHA512 ed4cc32c419f27ac33446a168e7949006b1a08a24008796e2c4dd49ead24d86f70c74a4a66fc8aced1535fdd8c4f4797bdd06566abb49e77bcc509cac58f4139
SSDEEP 6144:jVvldIZKPOVHEikXWg4DW1BAaj+A/bT7j6J0H62Oi9OVtkWCnfM2cCck2cxb:jCTHVW1qm+6Tf6Jw62ObVGfMocvcF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10053

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vawahaw9_voxe-ladoya\doxifu\lizu.pdb

kernel32

WriteConsoleOutputCharacterW GetConsoleAliasesLengthW EnumDateFormatsExW InterlockedIncrement _lwrite InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW SetVolumeMountPointW GetModuleHandleW EnumCalendarInfoExW SetThreadUILanguage IsBadReadPtr GetConsoleAliasesLengthA GetUserDefaultLangID GetEnvironmentStrings GetConsoleCP ReadConsoleInputA GetSystemWindowsDirectoryA WriteConsoleOutputA LeaveCriticalSection GetFileAttributesA GetComputerNameExA lstrcpynW SetConsoleCursorPosition ReadFile GetModuleFileNameW GetTimeZoneInformation lstrlenW GetConsoleOutputCP InterlockedExchange GetLastError ChangeTimerQueueTimer GetProcAddress PeekConsoleInputW BeginUpdateResourceW RemoveDirectoryA BuildCommDCBW ResetEvent GetLocalTime LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc SetEnvironmentVariableA GetOEMCP HeapSetInformation GetConsoleTitleW SetCalendarInfoA ReleaseMutex FindFirstVolumeW GetVolumeNameForVolumeMountPointW GetCurrentProcessId GetConsoleProcessList GetMailslotInfo CreateTimerQueue CreateFileA SetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle WriteConsoleW

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

f01851ea050f82906d3b3c97fb7e3b6b_JaffaCakes118

kernel32

user32

generic