f41922ec045ae9d97585118ed080cf0f_JaffaCakes118

General

Target
f41922ec045ae9d97585118ed080cf0f_JaffaCakes118
Size 477KB
Sample240416-xend2ahf63
SHA256 4b8c4a8eac028219e9061dc6b6cf7042526a56e13c8df7ddbd301b9854b7b19a
MD5 f41922ec045ae9d97585118ed080cf0f
SHA1 b0c644a6bba3c9402dcd77eb9c2fec30542fc38d
SHA512 89ee1251b8587f748bf0ae5ed011d231835370802532604b8ffbceba4352b9992509f53b14e034a4223f98bb0a4151a2e47ca0a0cc1d6bddc17f355747499c15
SSDEEP 6144:4LLJLjTP1hhkWXQBi2W6aWLTLkglQsT3kOGu/ugLSLYrziboCMk/Qnu9zrRgpS6y:4LtHxAVlNPjGumg0HUnWR1GY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f41922ec045ae9d97585118ed080cf0f_JaffaCakes118

File Explorer

f41922ec045ae9d97585118ed080cf0f_JaffaCakes118

.exe 477KB

f41922ec045ae9d97585118ed080cf0f_JaffaCakes118

IMPHASH 57a1e3423c1839b1bf16ef223be9627b
SHA256 4b8c4a8eac028219e9061dc6b6cf7042526a56e13c8df7ddbd301b9854b7b19a
MD5 f41922ec045ae9d97585118ed080cf0f
SHA1 b0c644a6bba3c9402dcd77eb9c2fec30542fc38d
SHA512 89ee1251b8587f748bf0ae5ed011d231835370802532604b8ffbceba4352b9992509f53b14e034a4223f98bb0a4151a2e47ca0a0cc1d6bddc17f355747499c15
SSDEEP 6144:4LLJLjTP1hhkWXQBi2W6aWLTLkglQsT3kOGu/ugLSLYrziboCMk/Qnu9zrRgpS6y:4LtHxAVlNPjGumg0HUnWR1GY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\bavugayuwaxavo_fajocu-kimokavod\guz\mewo.pdb

kernel32

EnumDateFormatsExW FindResourceExW WriteConsoleOutputCharacterA EndUpdateResourceW GetUserDefaultLCID SetConsoleScreenBufferSize WriteConsoleInputA GetComputerNameW SetEvent GetSystemDefaultLCID GetProcessHeap GetConsoleAliasesLengthA ReadConsoleW SetFileTime WriteFile CreateActCtxW GetVolumePathNameW ActivateActCtx GetConsoleCP GlobalFindAtomA TerminateThread ReadConsoleInputA GetSystemWindowsDirectoryA ReadConsoleOutputW SetConsoleCP InterlockedPopEntrySList DnsHostnameToComputerNameW GetConsoleAliasW VerifyVersionInfoA WriteConsoleW GetMailslotInfo GetTimeZoneInformation lstrlenA SetConsoleTitleA InterlockedExchange GetCPInfoExW GetLastError GetLongPathNameW SetLastError GetProcAddress GetConsoleDisplayMode EnterCriticalSection LoadLibraryA CreateTapePartition GetProfileStringA WaitForMultipleObjects SetEnvironmentVariableA GetModuleHandleA UpdateResourceW CancelTimerQueueTimer BuildCommDCBA VirtualProtect GetFileAttributesExW SetCalendarInfoA FindFirstVolumeW GetCurrentProcessId GetPrivateProfileSectionW GlobalReAlloc GetSystemTime AreFileApisANSI CreateFileA SetStdHandle CreateActCtxA GetConsoleOutputCP UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetStartupInfoW GetModuleHandleW Sleep ExitProcess GetStdHandle GetModuleFileNameA LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte RtlUnwind HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle WriteConsoleA

user32

RealGetWindowClassA GetAltTabInfoA

advapi32

BackupEventLogW

winhttp

WinHttpSetOption

Sharing

General

Malware Config

Signatures

File Explorer

f41922ec045ae9d97585118ed080cf0f_JaffaCakes118

kernel32

user32

advapi32

winhttp

generic