f8280412bf45e83a637a9d523375463b_JaffaCakes118

General

Target
f8280412bf45e83a637a9d523375463b_JaffaCakes118
Size 10.8MB
Sample240418-rdxy7afb69
SHA256 aab4d171224cd7e59fd439190fb4a351bccb2299a553c2869d1e5e6a225bcb08
MD5 f8280412bf45e83a637a9d523375463b
SHA1 eaf3df733d4cc605e25cc7e123c808f34b840af7
SHA512 a17ff9527031b9e777e38b31c0316fb53992bb4e426aa45a5f850d35215248d02d664e16363a2706255e8b76a328d0b8b358f90a80505d4bf2ac4a374287f4ef
SSDEEP 49152:MsrcHggggggggggggggggggggggggggggggggggggggggggggggggggggggggggY:Nc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8280412bf45e83a637a9d523375463b_JaffaCakes118

File Explorer

f8280412bf45e83a637a9d523375463b_JaffaCakes118

.exe 10.8MB

f8280412bf45e83a637a9d523375463b_JaffaCakes118

IMPHASH f839b76b04ad1707e543cd0ef249258a
SHA256 aab4d171224cd7e59fd439190fb4a351bccb2299a553c2869d1e5e6a225bcb08
MD5 f8280412bf45e83a637a9d523375463b
SHA1 eaf3df733d4cc605e25cc7e123c808f34b840af7
SHA512 a17ff9527031b9e777e38b31c0316fb53992bb4e426aa45a5f850d35215248d02d664e16363a2706255e8b76a328d0b8b358f90a80505d4bf2ac4a374287f4ef
SSDEEP 49152:MsrcHggggggggggggggggggggggggggggggggggggggggggggggggggggggggggY:Nc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

159184

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tonivojodifituf wote rujunuxido98\pihumibowi16\faxawos.pdb

kernel32

SetHandleInformation VirtualProtect SetLastError GetHandleInformation lstrlenW WriteFile WriteConsoleOutputCharacterA GetThreadSelectorEntry DebugActiveProcessStop DuplicateHandle SwitchToFiber GetLastError lstrcatW GlobalAlloc CloseHandle WritePrivateProfileStringA LoadLibraryW GetCurrencyFormatW GetProcAddress ExitProcess HeapSize ReadConsoleW WriteConsoleW CreateFileW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW MultiByteToWideChar WideCharToMultiByte GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW LCMapStringW GetLocaleInfoW GetCPInfo SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW HeapAlloc HeapReAlloc HeapFree GetModuleHandleExW GetModuleFileNameW GetStdHandle GetACP FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW SetEndOfFile

user32

LoadStringA DrawIcon EnumPropsW GetClipboardData SendMessageA SetCursor IsWindowUnicode GetMonitorInfoW

msimg32

TransparentBlt GradientFill

Sharing

General

Malware Config

Signatures

File Explorer

f8280412bf45e83a637a9d523375463b_JaffaCakes118

kernel32

user32

msimg32

generic