f5c7876ac8c03f6a72a0b5ea97d2c3f0_JaffaCakes118

General

Target
f5c7876ac8c03f6a72a0b5ea97d2c3f0_JaffaCakes118
Size 722KB
Sample240417-prphvsgf61
SHA256 ca583a0d850a3934cc7fc56b1beb3765732f8c4b61c2883e8c6bd86b59bc2099
MD5 f5c7876ac8c03f6a72a0b5ea97d2c3f0
SHA1 7309ed0a63224dc6e2d612149c789ed8f1f50c4e
SHA512 20e6d5b62b08a3ab783540200f9a66e03579f926c300084a44117d4d8b5a7b314087985c213c8a227280062500838e99ae895aa40b9f8b0aba3fdbe9fb07421b
SSDEEP 12288:NpJ4QSHDSIrhk0fzMeLSJsFMiyn46dW+Sw4DX7EwxgP9dBm+oG7Fvn/H:2znrhk0LXSJsCiyn36/ENPb7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5c7876ac8c03f6a72a0b5ea97d2c3f0_JaffaCakes118

File Explorer

f5c7876ac8c03f6a72a0b5ea97d2c3f0_JaffaCakes118

.exe 722KB

f5c7876ac8c03f6a72a0b5ea97d2c3f0_JaffaCakes118

IMPHASH 3053f2a72602e54beffbd9d286711499
SHA256 ca583a0d850a3934cc7fc56b1beb3765732f8c4b61c2883e8c6bd86b59bc2099
MD5 f5c7876ac8c03f6a72a0b5ea97d2c3f0
SHA1 7309ed0a63224dc6e2d612149c789ed8f1f50c4e
SHA512 20e6d5b62b08a3ab783540200f9a66e03579f926c300084a44117d4d8b5a7b314087985c213c8a227280062500838e99ae895aa40b9f8b0aba3fdbe9fb07421b
SSDEEP 12288:NpJ4QSHDSIrhk0fzMeLSJsFMiyn46dW+Sw4DX7EwxgP9dBm+oG7Fvn/H:2znrhk0LXSJsCiyn36/ENPb7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

540112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\noyuradofe\wezu wuma\34\juhofibo\liwe devavul.pdb

kernel32

CreateTimerQueue SearchPathW InterlockedIncrement GetProcessPriorityBoost GetTickCount GenerateConsoleCtrlEvent IsBadReadPtr GetConsoleAliasesLengthA SetFileShortNameW GetSystemTimeAdjustment GetVersionExW GetModuleFileNameW GetEnvironmentVariableA ExitThread lstrlenW GetStartupInfoW FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA CopyFileA CreateMemoryResourceNotification _hwrite OpenWaitableTimerA ProcessIdToSessionId RegisterWaitForSingleObject OpenWaitableTimerW LocalAlloc MoveFileA SetConsoleOutputCP SetCurrentDirectoryW WriteProfileSectionW GetModuleHandleA GetProcessShutdownParameters FreeEnvironmentStringsW GetCurrentDirectoryA CompareStringA GetFileTime OutputDebugStringA GetVersionExA GetWindowsDirectoryW DeleteTimerQueueTimer AddConsoleAliasA DeleteFileA CloseHandle CreateFileW SetStdHandle RaiseException GetCommandLineW HeapSetInformation DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer InterlockedDecrement GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW GetLastError QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate HeapCreate WriteFile GetStringTypeW MultiByteToWideChar EnterCriticalSection LeaveCriticalSection WriteConsoleW OutputDebugStringW LoadLibraryW RtlUnwind WideCharToMultiByte LCMapStringW HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetComboBoxInfo

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

f5c7876ac8c03f6a72a0b5ea97d2c3f0_JaffaCakes118

kernel32

user32

winhttp

generic