f0d314f0095993e58ef3450fc29f91a8_JaffaCakes118

General

Target
f0d314f0095993e58ef3450fc29f91a8_JaffaCakes118
Size 14.2MB
Sample240415-mcjb7acb34
SHA256 27d3458a7ed6711281cd23b81d30ca9989a794d6c43dc1e9e7b1a65c1519857e
MD5 f0d314f0095993e58ef3450fc29f91a8
SHA1 a93197f21d5c04a98be6ce7eb0295cb2bd6c2d1b
SHA512 f4485d7ae5d3bb2b77d6b9329d944b49edbe06f21369eaae966b6b20310824c12fd0d2bef3ddba1cc902b37e5e0d0585ee03adf0fcb1fc30bd368dff0139a187
SSDEEP 12288:35oxrglLhHuVQyksr86fNBj++++++++++++++++++++++++++++++++++++++++G:QrmLoT91B
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0d314f0095993e58ef3450fc29f91a8_JaffaCakes118

File Explorer

f0d314f0095993e58ef3450fc29f91a8_JaffaCakes118

.exe 14.2MB

f0d314f0095993e58ef3450fc29f91a8_JaffaCakes118

IMPHASH 57bb9b4b2dab4ca0a9a9d0cdae0c89c2
SHA256 27d3458a7ed6711281cd23b81d30ca9989a794d6c43dc1e9e7b1a65c1519857e
MD5 f0d314f0095993e58ef3450fc29f91a8
SHA1 a93197f21d5c04a98be6ce7eb0295cb2bd6c2d1b
SHA512 f4485d7ae5d3bb2b77d6b9329d944b49edbe06f21369eaae966b6b20310824c12fd0d2bef3ddba1cc902b37e5e0d0585ee03adf0fcb1fc30bd368dff0139a187
SSDEEP 12288:35oxrglLhHuVQyksr86fNBj++++++++++++++++++++++++++++++++++++++++G:QrmLoT91B
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wuxotitilutav\45-xujigaloxer\79\tilezoyowocun\zo.pdb

kernel32

GetFileSize GetNativeSystemInfo SetFilePointer GetConsoleAliasesLengthW CopyFileExW SetLocalTime GetConsoleAliasExesLengthA InterlockedIncrement VerSetConditionMask GetCommState InterlockedDecrement ZombifyActCtx CompareFileTime GetSystemWindowsDirectoryW SetEnvironmentVariableW GlobalLock SetConsoleScreenBufferSize WriteConsoleInputA SetComputerNameW FreeEnvironmentStringsA VirtualFree SetProcessPriorityBoost FindResourceExA GetComputerNameExA CreateSemaphoreA GetFileAttributesW GetBinaryTypeA ReadFile UnregisterWait CompareStringW lstrlenW InterlockedExchange SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW OpenMutexW GetCurrentDirectoryW GetProcAddress CreateNamedPipeA WriteProfileSectionA ReadFileEx SetStdHandle DisableThreadLibraryCalls GetPrivateProfileStringA LoadLibraryA GetConsoleScreenBufferInfo LocalAlloc FindAtomA EnumResourceNamesA WriteProfileStringW FatalAppExitA GetVersionExA TlsAlloc DeleteFileW LCMapStringW AreFileApisANSI GetOverlappedResult GetComputerNameA GetLastError MoveFileA GetCommandLineA HeapValidate IsBadReadPtr RaiseException DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetHandleCount GetStdHandle GetFileType TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleW Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA GetModuleHandleA

gdi32

GetBoundsRect

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

f0d314f0095993e58ef3450fc29f91a8_JaffaCakes118

kernel32

gdi32

winhttp

generic