f0af15a2314afee90871fe75a1faa3a3_JaffaCakes118

General

Target
f0af15a2314afee90871fe75a1faa3a3_JaffaCakes118
Size 594KB
Sample240415-knrftsch81
SHA256 4ae2121a59907625840dfc680841abdd1cbb1646f0e46f3078b8f4e7d55f3d8e
MD5 f0af15a2314afee90871fe75a1faa3a3
SHA1 58a9d3200daf1b04a72c730b9a93b22b94bf5e25
SHA512 678abd85f55f68bb559182784c0c10d531bb8a2401606f22768c10eab36a36a36a46bf8de652305450dd57d84a84d4812b51adfb09857883995c2f4a2a476045
SSDEEP 12288:xF/Q4o6kX2HpCkZ71STDiYYQbSqDGGPTwEeEAz2:XFoeCkZ71STepKSmbTw1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0af15a2314afee90871fe75a1faa3a3_JaffaCakes118

File Explorer

f0af15a2314afee90871fe75a1faa3a3_JaffaCakes118

.exe 594KB

f0af15a2314afee90871fe75a1faa3a3_JaffaCakes118

IMPHASH 9b6cb8fb7864152f2c65c8441d386700
SHA256 4ae2121a59907625840dfc680841abdd1cbb1646f0e46f3078b8f4e7d55f3d8e
MD5 f0af15a2314afee90871fe75a1faa3a3
SHA1 58a9d3200daf1b04a72c730b9a93b22b94bf5e25
SHA512 678abd85f55f68bb559182784c0c10d531bb8a2401606f22768c10eab36a36a36a46bf8de652305450dd57d84a84d4812b51adfb09857883995c2f4a2a476045
SSDEEP 12288:xF/Q4o6kX2HpCkZ71STDiYYQbSqDGGPTwEeEAz2:XFoeCkZ71STepKSmbTw1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4592

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zafazaci\pewosaf\pivo_29\zejoy84\rid.pdb

kernel32

WriteConsoleInputW CopyFileExW TlsGetValue SetLocalTime GetDriveTypeW SetEndOfFile GetNumberOfConsoleInputEvents FindResourceExW MapUserPhysicalPages InterlockedIncrement GetQueuedCompletionStatus GetCommState InterlockedDecrement ScrollConsoleScreenBufferW CallNamedPipeW GetModuleHandleW WriteFileGather CreateDirectoryExW Sleep GetSystemTimeAdjustment GlobalFlags Beep VerifyVersionInfoA IsDBCSLeadByte ReadFile CreateFileW GetBinaryTypeW GetACP lstrlenW VerifyVersionInfoW CreateDirectoryA GetStdHandle OpenMutexW GetCurrentDirectoryW GetProcAddress SetVolumeLabelW WriteProfileSectionA FindFirstFileW SetComputerNameA CreateMemoryResourceNotification SearchPathA GetPrivateProfileStringA SetFileApisToOEM GetAtomNameA Process32FirstW OpenWaitableTimerW LocalAlloc IsSystemResumeAutomatic SetConsoleOutputCP AddAtomW SetCommMask GetPrivateProfileStructA EnumResourceTypesW SetConsoleTitleW GetModuleHandleA FreeEnvironmentStringsW EnumResourceNamesA GetConsoleTitleW BuildCommDCBA CompareStringA GetConsoleCursorInfo SetCalendarInfoA GetVersionExA GetWindowsDirectoryW GetCurrentProcessId InterlockedPushEntrySList GetProfileSectionW SuspendThread LCMapStringW GetVolumeInformationW SetFilePointer SetStdHandle CloseHandle RaiseException ReadFileEx GetFileSize GetCommandLineW HeapSetInformation GetStartupInfoW EnterCriticalSection LeaveCriticalSection DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW QueryPerformanceCounter GetTickCount GetCurrentThreadId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr TlsAlloc TlsSetValue TlsFree SetLastError GetLastError HeapCreate WriteFile RtlUnwind GetOEMCP GetCPInfo IsValidCodePage OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW MultiByteToWideChar HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree GetStringTypeW WideCharToMultiByte FlushFileBuffers GetConsoleCP GetConsoleMode IsProcessorFeaturePresent

user32

GetMenuBarInfo GetComboBoxInfo GetMessageTime

advapi32

InitiateSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

f0af15a2314afee90871fe75a1faa3a3_JaffaCakes118

kernel32

user32

advapi32

generic