f059b70c004f6d957db5dfcaa78449a7_JaffaCakes118

General

Target
f059b70c004f6d957db5dfcaa78449a7_JaffaCakes118
Size 487KB
Sample240415-fg3hasfa43
SHA256 950c8f578b4dd0915b3e40c14d52e71776586c30af8ad81c6783fa7592461e00
MD5 f059b70c004f6d957db5dfcaa78449a7
SHA1 396c7a2afe90a4037a727e4231074743c9e65c79
SHA512 971d58e89eddf4cf524e596a0520aacf1cc372a0de8ab8c5a06fadeb1fdc701c1e6882b372a0ad5ce776832e412a85394e1a9c70d370310974413c2d934a0991
SSDEEP 12288:KdbW5f2tRQDrQ2PUNGq42HG5UWZrVeRJ4:HksUMqJm5UWZpw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f059b70c004f6d957db5dfcaa78449a7_JaffaCakes118

File Explorer

f059b70c004f6d957db5dfcaa78449a7_JaffaCakes118

.exe 487KB

f059b70c004f6d957db5dfcaa78449a7_JaffaCakes118

IMPHASH 1bd9ec7a4dcb0a443d99b482d9f2b78b
SHA256 950c8f578b4dd0915b3e40c14d52e71776586c30af8ad81c6783fa7592461e00
MD5 f059b70c004f6d957db5dfcaa78449a7
SHA1 396c7a2afe90a4037a727e4231074743c9e65c79
SHA512 971d58e89eddf4cf524e596a0520aacf1cc372a0de8ab8c5a06fadeb1fdc701c1e6882b372a0ad5ce776832e412a85394e1a9c70d370310974413c2d934a0991
SSDEEP 12288:KdbW5f2tRQDrQ2PUNGq42HG5UWZrVeRJ4:HksUMqJm5UWZpw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\lafutaz zamusuhureboz_turesodatuhasu\sobagegab\xacizasel.pdb

kernel32

GetDefaultCommConfigW WriteConsoleOutputW HeapAlloc EndUpdateResourceW InterlockedIncrement SetEnvironmentVariableW GetEnvironmentStringsW AddConsoleAliasW EnumCalendarInfoExW GetConsoleAliasesLengthA GetConsoleTitleA WriteFile GetUserDefaultLangID GetEnvironmentStrings GlobalAlloc SetVolumeMountPointA GetSystemWindowsDirectoryA lstrcpynW VerifyVersionInfoA GetModuleFileNameW GetACP LCMapStringA GetCPInfoExW GetProcAddress GetComputerNameExW CreateTimerQueueTimer FreeUserPhysicalPages EnterCriticalSection VerLanguageNameW GetLocalTime LoadLibraryA WaitForMultipleObjects VirtualProtect PeekConsoleInputA GetVersionExA ReadConsoleInputW GetVersion DeleteTimerQueueTimer GetCurrentProcessId FindNextVolumeA CreateThread CreateFileA PulseEvent HeapQueryInformation GetCommandLineW SetStdHandle SetFilePointer WideCharToMultiByte InterlockedDecrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoW GetCPInfo RtlUnwind LCMapStringW GetStringTypeW GetStdHandle GetModuleFileNameA HeapCreate VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetStringTypeA HeapSize GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

ClientToScreen RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

f059b70c004f6d957db5dfcaa78449a7_JaffaCakes118

kernel32

user32

generic