f3aac059e524fec0d0ee9e0ff9a196c4_JaffaCakes118

General

Target
f3aac059e524fec0d0ee9e0ff9a196c4_JaffaCakes118
Size 456KB
Sample240416-rmjsxsdf9v
SHA256 d5b118a729948d72d46885055085ced3853d098853c28d84e070a5c107433c4d
MD5 f3aac059e524fec0d0ee9e0ff9a196c4
SHA1 1b7a7185fd579e90433b46878d1a57d1f700f665
SHA512 2cd598931438dedccdef33dba695b156b5fdf4152e939bbdd527c8835f2025233515f56bf930d0eea50ebe23dfe583b10256f52ff16b80e687774073a173bcd7
SSDEEP 12288:qTdMACErk31LIuPv0QRpxJOzyybVe1McIjhVec:qTX/rk318uH0QbTSua5jhV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3aac059e524fec0d0ee9e0ff9a196c4_JaffaCakes118

File Explorer

f3aac059e524fec0d0ee9e0ff9a196c4_JaffaCakes118

.exe 456KB

f3aac059e524fec0d0ee9e0ff9a196c4_JaffaCakes118

IMPHASH c2177a2021a127fae92a922150801df7
SHA256 d5b118a729948d72d46885055085ced3853d098853c28d84e070a5c107433c4d
MD5 f3aac059e524fec0d0ee9e0ff9a196c4
SHA1 1b7a7185fd579e90433b46878d1a57d1f700f665
SHA512 2cd598931438dedccdef33dba695b156b5fdf4152e939bbdd527c8835f2025233515f56bf930d0eea50ebe23dfe583b10256f52ff16b80e687774073a173bcd7
SSDEEP 12288:qTdMACErk31LIuPv0QRpxJOzyybVe1McIjhVec:qTX/rk318uH0QbTSua5jhV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10059

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\watiyihajipap54\gotewovikiva-25\nituwahaligu\nasug yebiyafe.pdb

kernel32

WriteConsoleOutputCharacterW GetConsoleAliasesLengthW EnumDateFormatsExW InterlockedIncrement _lwrite InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW SetVolumeMountPointW GetModuleHandleW EnumCalendarInfoExW IsBadReadPtr GetConsoleAliasesLengthA GetUserDefaultLangID GetEnvironmentStrings GetConsoleCP ReadConsoleInputA GetSystemWindowsDirectoryA WriteConsoleOutputA LeaveCriticalSection GetFileAttributesA GetComputerNameExA lstrcpynW SetConsoleCursorPosition LocalReAlloc CreateTimerQueue ReadFile GetTimeZoneInformation lstrlenW GetConsoleOutputCP InterlockedExchange GetLastError ChangeTimerQueueTimer GetProcAddress PeekConsoleInputW BeginUpdateResourceW RemoveDirectoryA BuildCommDCBW ResetEvent GetLocalTime LoadLibraryA OpenMutexA WriteConsoleA SetEnvironmentVariableA GetModuleFileNameA GetOEMCP HeapSetInformation GetConsoleTitleW VirtualProtect SetCalendarInfoA ReleaseMutex FindFirstVolumeW GetVolumeNameForVolumeMountPointW GetCurrentProcessId GetConsoleProcessList CreateFileA GetMailslotInfo GetSystemDefaultLangID SetStdHandle WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle

user32

RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

f3aac059e524fec0d0ee9e0ff9a196c4_JaffaCakes118

kernel32

user32

generic