f6d7c7a90429c7668bab5c0339e18e84_JaffaCakes118

General

Target
f6d7c7a90429c7668bab5c0339e18e84_JaffaCakes118
Size 10.9MB
Sample240417-3wplbaac47
SHA256 c62d36cd6ae1a3563d49df5ab3fa5375d8781f3d5f60a90c0a2afdcae81454fa
MD5 f6d7c7a90429c7668bab5c0339e18e84
SHA1 ada7b42c5fb01651c4b9526974e953ac8e908508
SHA512 31e176c0847df5920eca0834ebd7cf47d5e52547f8add92398318cee17e93b74c2ebbd0b222c0586f7f008b8508c9f788141b45875af81230659507496483620
SSDEEP 24576:djCj10HSqGgeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeen:d/D
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6d7c7a90429c7668bab5c0339e18e84_JaffaCakes118

File Explorer

f6d7c7a90429c7668bab5c0339e18e84_JaffaCakes118

.exe 10.9MB

f6d7c7a90429c7668bab5c0339e18e84_JaffaCakes118

IMPHASH 800102d28cf35c665bee356e0e434ad6
SHA256 c62d36cd6ae1a3563d49df5ab3fa5375d8781f3d5f60a90c0a2afdcae81454fa
MD5 f6d7c7a90429c7668bab5c0339e18e84
SHA1 ada7b42c5fb01651c4b9526974e953ac8e908508
SHA512 31e176c0847df5920eca0834ebd7cf47d5e52547f8add92398318cee17e93b74c2ebbd0b222c0586f7f008b8508c9f788141b45875af81230659507496483620
SSDEEP 24576:djCj10HSqGgeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeen:d/D
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fedos\18 wakevix dedutekudogo-gadosov93 volixa.pdb

kernel32

GetVolumeNameForVolumeMountPointA GetComputerNameA GetFileSize SetFilePointer lstrlenA GetConsoleAliasesLengthW CopyFileExW GetConsoleAliasExesA GetConsoleAliasExesLengthA MapUserPhysicalPages FreeLibrary InterlockedIncrement InterlockedDecrement ZombifyActCtx GlobalLock GetProfileSectionA SetComputerNameW GetFileAttributesExA FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig LocalFlags GetConsoleAliasesLengthA GetWindowsDirectoryA SetCommState TlsSetValue GetEnvironmentStrings FindResourceExA GlobalAlloc LoadLibraryW _hread GetCalendarInfoA GetSystemWow64DirectoryW GetSystemWindowsDirectoryA GetSystemTimeAdjustment InitAtomTable GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile CompareStringW SetConsoleTitleA VirtualUnlock LCMapStringA SetCurrentDirectoryA GetStartupInfoA GetStdHandle GetCPInfoExW GetCurrentDirectoryW VerLanguageNameA SetFirmwareEnvironmentVariableW CreateNamedPipeA GetLocalTime LoadLibraryA CreateSemaphoreW SetConsoleCtrlHandler WriteProfileSectionW Process32NextW CreateIoCompletionPort EnumResourceNamesA WriteProfileStringW BuildCommDCBA VirtualProtect _lopen FindAtomW GetVersion DeleteFileW UnregisterWaitEx ReadConsoleOutputCharacterW AreFileApisANSI CommConfigDialogW GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage GetProcAddress TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError LeaveCriticalSection EnterCriticalSection SetStdHandle GetFileType WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection SetHandleCount QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers GetModuleHandleA

user32

GetMessageTime GetMenuInfo

Sharing

General

Malware Config

Signatures

File Explorer

f6d7c7a90429c7668bab5c0339e18e84_JaffaCakes118

kernel32

user32

generic