f57cd778108ff4b725229d6bdeacac0a_JaffaCakes118

General

Target
f57cd778108ff4b725229d6bdeacac0a_JaffaCakes118
Size 456KB
Sample240417-lprnnabc28
SHA256 226ea6cceff1ed8e0cfd746644f53b95a829d2c6375ebfa120c6e57151fd3f31
MD5 f57cd778108ff4b725229d6bdeacac0a
SHA1 d4b7ea64c328a3e7ab4f77d2515e57eaefa3f48f
SHA512 e70d7d0b3f4c8fbaf2fa2b591842ff42b07e866ae830af48bd464687214f81b1c59bb0f14b360fa3c8edb3b34b296f1da556630ccf2fd31758c012b1c59b863c
SSDEEP 12288:DBXmv7ymcOd0z73xEhVhMHykkCiEfsec:DB8y60zduMykFfs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f57cd778108ff4b725229d6bdeacac0a_JaffaCakes118

File Explorer

f57cd778108ff4b725229d6bdeacac0a_JaffaCakes118

.exe 456KB

f57cd778108ff4b725229d6bdeacac0a_JaffaCakes118

IMPHASH 1c8d9df578fc452582af8996e539153c
SHA256 226ea6cceff1ed8e0cfd746644f53b95a829d2c6375ebfa120c6e57151fd3f31
MD5 f57cd778108ff4b725229d6bdeacac0a
SHA1 d4b7ea64c328a3e7ab4f77d2515e57eaefa3f48f
SHA512 e70d7d0b3f4c8fbaf2fa2b591842ff42b07e866ae830af48bd464687214f81b1c59bb0f14b360fa3c8edb3b34b296f1da556630ccf2fd31758c012b1c59b863c
SSDEEP 12288:DBXmv7ymcOd0z73xEhVhMHykkCiEfsec:DB8y60zduMykFfs
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10084

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vofabu_behawawijuzel\x.pdb

kernel32

CreateTimerQueue WriteConsoleOutputCharacterW EnumDateFormatsExW _lwrite InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW SetConsoleScreenBufferSize SetVolumeMountPointW GetModuleHandleW EnumCalendarInfoExW IsBadReadPtr GetConsoleAliasesLengthA GetUserDefaultLangID GetEnvironmentStrings GetConsoleCP ReadConsoleInputA GetSystemWindowsDirectoryA WriteConsoleOutputA LeaveCriticalSection GetFileAttributesA GetComputerNameExA lstrcpynW LocalReAlloc GetMailslotInfo ReadFile HeapReAlloc GetTimeZoneInformation lstrlenW GetConsoleOutputCP InterlockedExchange GetLastError ChangeTimerQueueTimer GetProcAddress PeekConsoleInputW BeginUpdateResourceW RemoveDirectoryA ResetEvent GetLocalTime LoadLibraryA OpenMutexA WriteConsoleA GlobalGetAtomNameW SetEnvironmentVariableA GetModuleFileNameA GetOEMCP HeapSetInformation GetConsoleTitleW BuildCommDCBA VirtualProtect SetCalendarInfoA FindFirstVolumeA ReleaseMutex GetVolumeNameForVolumeMountPointW GetCurrentProcessId GetConsoleProcessList CreateFileA GetSystemDefaultLangID SetStdHandle WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapCreate TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle

user32

RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

f57cd778108ff4b725229d6bdeacac0a_JaffaCakes118

kernel32

user32

generic