f284271435132b9487ddf8dd41992578_JaffaCakes118

General

Target
f284271435132b9487ddf8dd41992578_JaffaCakes118
Size 14.2MB
Sample240416-dbjf5aff38
SHA256 8a19788e6391d24385ece1dc77bb1a3f381bfd951faa17ce3925592842d19986
MD5 f284271435132b9487ddf8dd41992578
SHA1 26ec52a5e08c3370a92e47b5f43a12057cbe8616
SHA512 4027ec19d3371d2707855d1e709a48ac96e9c09251a57de035c5e2d0b10cb6ecdeddae9e6c235c524022ff305b794340815fa2ad40a7d6cf287f2304942a0687
SSDEEP 196608:0zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f284271435132b9487ddf8dd41992578_JaffaCakes118

File Explorer

f284271435132b9487ddf8dd41992578_JaffaCakes118

.exe 14.2MB

f284271435132b9487ddf8dd41992578_JaffaCakes118

IMPHASH 364098e961c6433a5f030e6d84a48050
SHA256 8a19788e6391d24385ece1dc77bb1a3f381bfd951faa17ce3925592842d19986
MD5 f284271435132b9487ddf8dd41992578
SHA1 26ec52a5e08c3370a92e47b5f43a12057cbe8616
SHA512 4027ec19d3371d2707855d1e709a48ac96e9c09251a57de035c5e2d0b10cb6ecdeddae9e6c235c524022ff305b794340815fa2ad40a7d6cf287f2304942a0687
SSDEEP 196608:0zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz:
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5664

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dexogucef34_geb_pexakav.pdb

kernel32

GetFileSize SetLocalTime GetDriveTypeW SetEndOfFile GetNumberOfConsoleInputEvents FindResourceExW MapUserPhysicalPages InterlockedIncrement GetQueuedCompletionStatus GetCommState InterlockedDecrement ScrollConsoleScreenBufferW WriteConsoleInputA SetComputerNameW CallNamedPipeW GetModuleHandleW GetSystemWow64DirectoryA WriteFileGather CreateDirectoryExW TlsSetValue GlobalAlloc GetVolumeInformationA Sleep GetSystemTimeAdjustment GlobalFlags Beep VerifyVersionInfoA IsDBCSLeadByte ReadFile CreateFileW GetBinaryTypeW CompareStringW GetACP lstrlenW GetConsoleOutputCP CreateDirectoryA GetStdHandle FindFirstFileA OpenMutexW GlobalFix SetVolumeLabelW WriteProfileSectionA ReadFileEx CreateMemoryResourceNotification SearchPathA GetPrivateProfileStringA SetFileApisToOEM GetAtomNameA Process32FirstW OpenWaitableTimerW IsSystemResumeAutomatic GetCommMask AddAtomA GetSystemInfo SetSystemTime EnumResourceTypesW SetConsoleCursorInfo SetConsoleTitleW GetModuleHandleA FreeEnvironmentStringsW EnumResourceNamesA GetConsoleTitleW BuildCommDCBA GetCurrentDirectoryA CompareStringA SetCalendarInfoA GetVersionExA GetWindowsDirectoryW GetCurrentProcessId InterlockedPushEntrySList GetProfileSectionW SuspendThread LCMapStringW CopyFileExA DeleteFileA GetProcAddress GetCommandLineW GetStartupInfoW HeapValidate IsBadReadPtr RaiseException LeaveCriticalSection EnterCriticalSection SetStdHandle GetLastError GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentThreadId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW SetHandleCount GetStartupInfoA TlsGetValue TlsAlloc TlsFree SetLastError HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA WriteConsoleW MultiByteToWideChar SetFilePointer RtlUnwind DebugBreak OutputDebugStringA OutputDebugStringW LoadLibraryW LoadLibraryA LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle FlushFileBuffers

user32

GetListBoxInfo GetComboBoxInfo GetMenuBarInfo

advapi32

InitiateSystemShutdownW

Sharing

General

Malware Config

Signatures

File Explorer

f284271435132b9487ddf8dd41992578_JaffaCakes118

kernel32

user32

advapi32

generic