f5a99263467440a04da884e37b581577_JaffaCakes118

General

Target
f5a99263467440a04da884e37b581577_JaffaCakes118
Size 14.2MB
Sample240417-nkcp2sdc46
SHA256 bc51cad0a8ed5eb57551f034a5f693b4d1c135201a38ff4b3d7c1eb6151745c2
MD5 f5a99263467440a04da884e37b581577
SHA1 58c016d9dae50898c03dc602997db96b14fbc2fe
SHA512 b5255af60ca12756011398e5907ef6587cd9ea77401b55b30c0812c2c616ab492eff9d2bba6c5a7ba7732e2f4f0eba80d702bb0d98e767499d182219e16f45af
SSDEEP 196608:H4TTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTH:H
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5a99263467440a04da884e37b581577_JaffaCakes118

File Explorer

f5a99263467440a04da884e37b581577_JaffaCakes118

.exe 14.2MB

f5a99263467440a04da884e37b581577_JaffaCakes118

IMPHASH 848a7504f9e97d3a5e7cf95079b638a5
SHA256 bc51cad0a8ed5eb57551f034a5f693b4d1c135201a38ff4b3d7c1eb6151745c2
MD5 f5a99263467440a04da884e37b581577
SHA1 58c016d9dae50898c03dc602997db96b14fbc2fe
SHA512 b5255af60ca12756011398e5907ef6587cd9ea77401b55b30c0812c2c616ab492eff9d2bba6c5a7ba7732e2f4f0eba80d702bb0d98e767499d182219e16f45af
SSDEEP 196608:H4TTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTH:H
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\siwacumuniy.pdb

kernel32

GetCommandLineW GetThreadContext SearchPathW SetInformationJobObject FindFirstChangeNotificationW lstrlenA CopyFileExW InterlockedIncrement GetSystemWindowsDirectoryW GetProfileStringW SetConsoleScreenBufferSize CallNamedPipeW FreeEnvironmentStringsA SetTapeParameters CreateNamedPipeW GetCompressedFileSizeW SetCommState CreateActCtxW FindResourceExA SetFileShortNameW LoadLibraryW SizeofResource GetSystemWow64DirectoryW HeapDestroy CreateSemaphoreA GetBinaryTypeA GetModuleFileNameW GetSystemDirectoryA GetStartupInfoW LCMapStringA GetPrivateProfileIntW GetLastError SetLastError GetProcAddress SetStdHandle LocalAlloc GetNumberFormatW FindAtomA FindNextFileA CreateIoCompletionPort HeapSetInformation GetCurrentDirectoryA OutputDebugStringA GetCPInfoExA FindAtomW DeleteFileW GetSystemTime InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer WriteFile GetStdHandle EnterCriticalSection LeaveCriticalSection RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW HeapValidate IsBadReadPtr HeapCreate SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeW LCMapStringW HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent FlushFileBuffers ReadFile RaiseException CreateFileW CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

f5a99263467440a04da884e37b581577_JaffaCakes118

kernel32

generic