f020da955cab805a4f8c60f8c1a375a4_JaffaCakes118

General

Target
f020da955cab805a4f8c60f8c1a375a4_JaffaCakes118
Size 14.0MB
Sample240415-db1emscg32
SHA256 7e9aa2336c370908afb719885d7cb83e3775c3a5c66712822dc984a70fdbccac
MD5 f020da955cab805a4f8c60f8c1a375a4
SHA1 905e9f614c2823c4b0b305590ee40dce6a158622
SHA512 e18aa565a4663d1ffd6c3255ddae1c46ec5464b965dc53f715218bcd9598303e92a74dd719d783aa5e39a2f5c4a5c33c89db30888fa0b722ae0edeefbbaae32f
SSDEEP 196608:ZRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRB:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f020da955cab805a4f8c60f8c1a375a4_JaffaCakes118

File Explorer

f020da955cab805a4f8c60f8c1a375a4_JaffaCakes118

.exe 14.0MB

f020da955cab805a4f8c60f8c1a375a4_JaffaCakes118

IMPHASH ed103d03110ecdb36297492051b4e917
SHA256 7e9aa2336c370908afb719885d7cb83e3775c3a5c66712822dc984a70fdbccac
MD5 f020da955cab805a4f8c60f8c1a375a4
SHA1 905e9f614c2823c4b0b305590ee40dce6a158622
SHA512 e18aa565a4663d1ffd6c3255ddae1c46ec5464b965dc53f715218bcd9598303e92a74dd719d783aa5e39a2f5c4a5c33c89db30888fa0b722ae0edeefbbaae32f
SSDEEP 196608:ZRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRB:
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5664

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\roho.pdb

kernel32

GetFileSize WriteConsoleInputW SetLocalTime GetDriveTypeW SetEndOfFile GetNumberOfConsoleInputEvents FindResourceExW MapUserPhysicalPages InterlockedIncrement GetQueuedCompletionStatus GetCommState InterlockedDecrement ScrollConsoleScreenBufferW SetComputerNameW CallNamedPipeW GetModuleHandleW GetSystemWow64DirectoryA WriteFileGather CreateDirectoryExW TlsSetValue GlobalAlloc GetVolumeInformationA Sleep GetSystemTimeAdjustment GlobalFlags Beep VerifyVersionInfoA IsDBCSLeadByte ReadFile CreateFileW GetBinaryTypeW CompareStringW GetACP lstrlenW GetConsoleOutputCP VerifyVersionInfoW CreateDirectoryA FindFirstFileA OpenMutexW GetProcAddress GlobalFix WriteProfileSectionA ReadFileEx SetStdHandle CreateMemoryResourceNotification SearchPathA GetPrivateProfileStringA SetFileApisToOEM GetAtomNameA Process32FirstW OpenWaitableTimerW IsSystemResumeAutomatic GetCommMask AddAtomA GetSystemInfo SetSystemTime EnumResourceTypesW SetConsoleCursorInfo SetConsoleTitleW GetModuleHandleA FreeEnvironmentStringsW EnumResourceNamesA GetConsoleTitleW BuildCommDCBA GetCurrentDirectoryA CompareStringA SetCalendarInfoA GetVersionExA GetWindowsDirectoryW GetCurrentProcessId InterlockedPushEntrySList GetProfileSectionW SuspendThread LCMapStringW CopyFileExA DeleteFileA SetVolumeLabelW GetCommandLineW GetStartupInfoW HeapValidate IsBadReadPtr RaiseException LeaveCriticalSection EnterCriticalSection GetLastError GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentThreadId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle GetStartupInfoA TlsGetValue TlsAlloc TlsFree SetLastError HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA WriteConsoleW MultiByteToWideChar SetFilePointer RtlUnwind DebugBreak OutputDebugStringA OutputDebugStringW LoadLibraryW LoadLibraryA LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle FlushFileBuffers

user32

GetMenuInfo GetComboBoxInfo GetMenuBarInfo

advapi32

InitiateSystemShutdownW

Sharing

General

Malware Config

Signatures

File Explorer

f020da955cab805a4f8c60f8c1a375a4_JaffaCakes118

kernel32

user32

advapi32

generic