f152c13bba794da66f2609639299f6c4_JaffaCakes118

General

Target
f152c13bba794da66f2609639299f6c4_JaffaCakes118
Size 12.1MB
Sample240415-r99b4abc81
SHA256 bfe6a26a9ce2912a847cb03cba96057caf7e87a074ed408e82de72edc9f93d5d
MD5 f152c13bba794da66f2609639299f6c4
SHA1 785b6a13f29846d9793681de51835b61c6630214
SHA512 d6fa6df224979e2a2bcdc38d324498484d3a6be2fe3f63d3245b2cb63414479aabfce4ce93916d226339329c4fa6cc356b1e11df03eccd3ca1fac4414c16924f
SSDEEP 393216:v00000000000000000000000000000000000000000000000000000000000000E:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f152c13bba794da66f2609639299f6c4_JaffaCakes118

File Explorer

f152c13bba794da66f2609639299f6c4_JaffaCakes118

.exe 12.1MB

f152c13bba794da66f2609639299f6c4_JaffaCakes118

IMPHASH a61ba9be2b3a5d77f92b97196cda9533
SHA256 bfe6a26a9ce2912a847cb03cba96057caf7e87a074ed408e82de72edc9f93d5d
MD5 f152c13bba794da66f2609639299f6c4
SHA1 785b6a13f29846d9793681de51835b61c6630214
SHA512 d6fa6df224979e2a2bcdc38d324498484d3a6be2fe3f63d3245b2cb63414479aabfce4ce93916d226339329c4fa6cc356b1e11df03eccd3ca1fac4414c16924f
SSDEEP 393216:v00000000000000000000000000000000000000000000000000000000000000E:
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14600

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\woxe11\wewi.pdb

kernel32

CreateJobObjectA SetProcessPriorityBoost GetVolumeInformationA GetSystemPowerStatus DeleteVolumeMountPointA GetDefaultCommConfigW CreateMutexA GetStdHandle InterlockedIncrement GetSystemTimeAdjustment FileTimeToSystemTime CreateNamedPipeW CallNamedPipeA EnumResourceNamesW SizeofResource LoadResource GetPriorityClass BuildCommDCBAndTimeoutsW LeaveCriticalSection DebugSetProcessKillOnExit EnumTimeFormatsA TlsGetValue GetACP WriteFile DeactivateActCtx ReleaseActCtx SetHandleInformation VerifyVersionInfoA GetVersionExW CallNamedPipeW FreeLibrary LoadLibraryExW GetComputerNameW CommConfigDialogW VirtualProtect lstrcpyA LoadLibraryA LocalAlloc SetFilePointer CancelWaitableTimer GetCurrentDirectoryA VirtualFree SetCommMask HeapSize SetUnhandledExceptionFilter GetBinaryTypeW GlobalSize SetConsoleMode GetConsoleCursorInfo MoveFileA SetTimeZoneInformation TzSpecificLocalTimeToSystemTime WriteConsoleInputA OpenMutexW GetThreadContext AddAtomA SetVolumeMountPointA SetSystemTime GlobalAlloc TerminateProcess GetCommandLineW GetLocalTime Beep ConnectNamedPipe GetFileAttributesW GetLastError lstrlenA CompareStringW CompareStringA GetCommandLineA GetStartupInfoA HeapAlloc EnterCriticalSection GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetProcAddress GetModuleHandleA GetModuleHandleW Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA VirtualAlloc HeapReAlloc GetCPInfo GetOEMCP IsValidCodePage RtlUnwind SetConsoleCtrlHandler InterlockedExchange InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale RaiseException GetLocaleInfoW CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle GetTimeZoneInformation CreateFileA SetEnvironmentVariableA

user32

GetWindowInfo

Sharing

General

Malware Config

Signatures

File Explorer

f152c13bba794da66f2609639299f6c4_JaffaCakes118

kernel32

user32

generic