f8ad0578fddb767757b10171e79b7714_JaffaCakes118

General

Target
f8ad0578fddb767757b10171e79b7714_JaffaCakes118
Size 456KB
Sample240418-y768aaea39
SHA256 44cee0b1d7db1d693ea83228625c4b26aab0c7962db1cf891d4cf995d7f10566
MD5 f8ad0578fddb767757b10171e79b7714
SHA1 993fce14e2b18609b5053060c9826d9e1576e946
SHA512 db53ee1c22f54683faac2b1110719d4a877dc7d258e2dfd7bb1f64e05f5a84b8481256c6d9f87782c9b7ee0593d281078534442e11280bbf80541babeecc7033
SSDEEP 12288:41g9qnpGcpVk5qGCnr26UzAM/HD4lhlSLNzq8Wec:41g9q1koGCnr2sM/DkWx2L
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8ad0578fddb767757b10171e79b7714_JaffaCakes118

File Explorer

f8ad0578fddb767757b10171e79b7714_JaffaCakes118

.exe 456KB

f8ad0578fddb767757b10171e79b7714_JaffaCakes118

IMPHASH 915c33ea178f4e014c52a0e08d0a2d56
SHA256 44cee0b1d7db1d693ea83228625c4b26aab0c7962db1cf891d4cf995d7f10566
MD5 f8ad0578fddb767757b10171e79b7714
SHA1 993fce14e2b18609b5053060c9826d9e1576e946
SHA512 db53ee1c22f54683faac2b1110719d4a877dc7d258e2dfd7bb1f64e05f5a84b8481256c6d9f87782c9b7ee0593d281078534442e11280bbf80541babeecc7033
SSDEEP 12288:41g9qnpGcpVk5qGCnr26UzAM/HD4lhlSLNzq8Wec:41g9q1koGCnr2sM/DkWx2L
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10094

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zum hesiv.pdb

kernel32

CreateTimerQueue WriteConsoleOutputCharacterW EnumDateFormatsExW GetDefaultCommConfigW HeapAlloc _lwrite InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW GetUserDefaultLCID SetConsoleScreenBufferSize SetVolumeMountPointW GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetEnvironmentStrings GetConsoleCP ReadConsoleInputA GetSystemWindowsDirectoryA WriteConsoleOutputA GetFileAttributesA GetComputerNameExA lstrcpynW LocalReAlloc HeapQueryInformation IsBadWritePtr GetMailslotInfo GetVolumeNameForVolumeMountPointA GetTimeZoneInformation lstrlenW GetConsoleOutputCP InterlockedExchange GetLastError ChangeTimerQueueTimer SetLastError GetProcAddress PeekConsoleInputW BeginUpdateResourceW RemoveDirectoryA EnterCriticalSection ResetEvent GetLocalTime LoadLibraryA OpenMutexA WriteConsoleA SetCalendarInfoW GlobalGetAtomNameW SetEnvironmentVariableA GetModuleFileNameA GetOEMCP GetConsoleTitleW BuildCommDCBA VirtualProtect FindFirstVolumeA ReleaseMutex GetCurrentProcessId GetConsoleProcessList CreateFileA ReadFile GetSystemDefaultLangID SetStdHandle WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle

user32

RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

f8ad0578fddb767757b10171e79b7714_JaffaCakes118

kernel32

user32

generic