f739890443a157e89c1973e74db41ef7_JaffaCakes118

General

Target
f739890443a157e89c1973e74db41ef7_JaffaCakes118
Size 478KB
Sample240418-epjjqaae53
SHA256 9f900d8fa07652fef51b583c5422ce011ce0940c59de8487d90ee0cabaeba530
MD5 f739890443a157e89c1973e74db41ef7
SHA1 581fad349578ebcbf83fa306ee29c7716ded0643
SHA512 9b28278071ec964e612e5793043adb408453105fa4cadfb46d09f59083b0ee1470ffea7d5d555bcf1b3b7eb9d3a7017a1abd09e50670158ff497c78a9eb761f2
SSDEEP 12288:Psr+hBZoH1RLqiPfnl3sXIpdOw54QJVrtk4vwoO:O+U1Hfl3wYOo5F
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f739890443a157e89c1973e74db41ef7_JaffaCakes118

File Explorer

f739890443a157e89c1973e74db41ef7_JaffaCakes118

.exe 478KB

f739890443a157e89c1973e74db41ef7_JaffaCakes118

IMPHASH 41772127f978069b9f399090f08eba15
SHA256 9f900d8fa07652fef51b583c5422ce011ce0940c59de8487d90ee0cabaeba530
MD5 f739890443a157e89c1973e74db41ef7
SHA1 581fad349578ebcbf83fa306ee29c7716ded0643
SHA512 9b28278071ec964e612e5793043adb408453105fa4cadfb46d09f59083b0ee1470ffea7d5d555bcf1b3b7eb9d3a7017a1abd09e50670158ff497c78a9eb761f2
SSDEEP 12288:Psr+hBZoH1RLqiPfnl3sXIpdOw54QJVrtk4vwoO:O+U1Hfl3wYOo5F
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

355590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sokekeromu38\wemobe misicikediva\59 lehecih\za.pdb

kernel32

LeaveCriticalSection GetConsoleAliasesLengthA InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExW WriteConsoleInputW ReadConsoleInputA InitializeSListHead SetConsoleDisplayMode WriteConsoleA GetConsoleCP VerifyVersionInfoW CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionA EnumDateFormatsExA DeleteTimerQueue LoadLibraryA FlushInstructionCache SetConsoleCP FindFirstVolumeW ReadFile BuildCommDCBW VerLanguageNameW SetFileApisToANSI WriteProcessMemory SetEvent GetExitCodeThread EndUpdateResourceW GetCPInfoExA SetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx CreateActCtxW HeapUnlock DnsHostnameToComputerNameW ReadConsoleOutputW GlobalFindAtomW GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleW CreateThread GetVersionExA GetProcessAffinityMask WaitForSingleObject SetConsoleCursorPosition VerifyVersionInfoA lstrlenA WriteConsoleOutputCharacterA GetFileAttributesExA GetComputerNameA CommConfigDialogW GetConsoleAliasA GetSystemTime GetDiskFreeSpaceW CreateFileA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleMode FlushFileBuffers GetLocaleInfoW GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

f739890443a157e89c1973e74db41ef7_JaffaCakes118

kernel32

user32

generic