f8518c38784e9b78cae4bc2b90bfc289_JaffaCakes118

General

Target
f8518c38784e9b78cae4bc2b90bfc289_JaffaCakes118
Size 14.7MB
Sample240418-tkcb6shc69
SHA256 d6f43f31fce6ae40ebfad16c8c01d765a965a2aae9907ffcaefe293031356a75
MD5 f8518c38784e9b78cae4bc2b90bfc289
SHA1 1a58456029f8a0af14172b797150241a2565b8b9
SHA512 53489166d21faceae92bd7a48995b0fb03009b3b50cfaf05f0e03c78c372db2e810167fd406ab8cc1456e6874418bebb5b94e16450c61b86120e887a2cff3b44
SSDEEP 12288:khq8okPz+6/uWlQJVppppppppppppppppppppppppppppppppppppppppppppppB:dSz+R
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8518c38784e9b78cae4bc2b90bfc289_JaffaCakes118

File Explorer

f8518c38784e9b78cae4bc2b90bfc289_JaffaCakes118

.exe 14.7MB

f8518c38784e9b78cae4bc2b90bfc289_JaffaCakes118

IMPHASH 7d2b5fe056f9f1898f2b12424a66461a
SHA256 d6f43f31fce6ae40ebfad16c8c01d765a965a2aae9907ffcaefe293031356a75
MD5 f8518c38784e9b78cae4bc2b90bfc289
SHA1 1a58456029f8a0af14172b797150241a2565b8b9
SHA512 53489166d21faceae92bd7a48995b0fb03009b3b50cfaf05f0e03c78c372db2e810167fd406ab8cc1456e6874418bebb5b94e16450c61b86120e887a2cff3b44
SSDEEP 12288:khq8okPz+6/uWlQJVppppppppppppppppppppppppppppppppppppppppppppppB:dSz+R
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8128

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\budumamopiy\varajocijejo100\xotefaxote\xobonise\g.pdb

kernel32

GetThreadContext SetInformationJobObject lstrlenA FindResourceExW InterlockedDecrement GetSystemWindowsDirectoryW GetProfileStringW SetConsoleScreenBufferSize FreeEnvironmentStringsA OutputDebugStringW CreateNamedPipeW GetUserDefaultLangID GetCommandLineA SetFileShortNameW LoadLibraryW FreeConsole GetSystemWow64DirectoryW InterlockedPopEntrySList HeapDestroy GetModuleFileNameW GetStartupInfoW GetCPInfoExW OpenMutexW GetLastError SetLastError GetProcAddress MoveFileW SetStdHandle SearchPathA VirtualAllocEx GetPrivateProfileStringA LocalAlloc SetSystemTime GetModuleFileNameA WriteProfileStringA WTSGetActiveConsoleSessionId CreateIoCompletionPort HeapSetInformation GetCurrentDirectoryA ReadConsoleInputW FindAtomW DeleteFileW CreateFileW RaiseException WideCharToMultiByte GetCommandLineW InterlockedIncrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer WriteFile GetStdHandle GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree HeapValidate IsBadReadPtr EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate IsProcessorFeaturePresent OutputDebugStringA WriteConsoleW LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree FlushFileBuffers ReadFile CloseHandle

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

f8518c38784e9b78cae4bc2b90bfc289_JaffaCakes118

kernel32

winhttp

generic