fb660cd8294a2f697bc610d746833d91_JaffaCakes118

General

Target
fb660cd8294a2f697bc610d746833d91_JaffaCakes118
Size 760KB
Sample240419-3c7b1sbb2s
SHA256 28877275c2c938f24cd0bf43f2c0cef090c58b7a85a988b2f6dff4970660b07d
MD5 fb660cd8294a2f697bc610d746833d91
SHA1 e9cfc83ec806592a49bd094e2bbc07c937e0c9e2
SHA512 10da1e75c4aeb3df811dd22a2da4528227f8d7350bfa5992ef6cc4f3f8822e2c7ffdf897040635c1476f95b0112f13376be7cb849a8dea81455db73056329c92
SSDEEP 12288:n0JPFOR1iusUfrhWlR7b00lfTu+PaOpGEIyl+fnbKx/Dpclca1lUSvsNdH1GXiD:KOR1iusUT0L7fTuMNuydFaYSgHcXi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb660cd8294a2f697bc610d746833d91_JaffaCakes118

File Explorer

fb660cd8294a2f697bc610d746833d91_JaffaCakes118

.exe 760KB

fb660cd8294a2f697bc610d746833d91_JaffaCakes118

IMPHASH d4acdf645025579e61b62a0ed0fb9285
SHA256 28877275c2c938f24cd0bf43f2c0cef090c58b7a85a988b2f6dff4970660b07d
MD5 fb660cd8294a2f697bc610d746833d91
SHA1 e9cfc83ec806592a49bd094e2bbc07c937e0c9e2
SHA512 10da1e75c4aeb3df811dd22a2da4528227f8d7350bfa5992ef6cc4f3f8822e2c7ffdf897040635c1476f95b0112f13376be7cb849a8dea81455db73056329c92
SSDEEP 12288:n0JPFOR1iusUfrhWlR7b00lfTu+PaOpGEIyl+fnbKx/Dpclca1lUSvsNdH1GXiD:KOR1iusUT0L7fTuMNuydFaYSgHcXi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8848

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tojoyaxo\viduf.pdb

kernel32

SetFilePointer lstrlenA CopyFileExW MapUserPhysicalPages FreeLibrary InterlockedIncrement GetCommState InterlockedDecrement ZombifyActCtx GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GlobalLock SetComputerNameW GetComputerNameW FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig GetConsoleAliasesLengthA GetWindowsDirectoryA GetConsoleAliasExesW TlsSetValue GetEnvironmentStrings FindResourceExA GlobalAlloc LoadLibraryW _hread GetCalendarInfoA GetSystemWow64DirectoryW GetSystemTimeAdjustment InitAtomTable GlobalFlags GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile CompareStringW ExitThread VirtualUnlock LCMapStringA CreateDirectoryA ReleaseActCtx GetFileSizeEx GetStartupInfoA GetCurrentDirectoryW GetProcAddress VerLanguageNameA SetFirmwareEnvironmentVariableW CreateNamedPipeA SetStdHandle BuildCommDCBW GetLocalTime LoadLibraryA Process32FirstW CreateSemaphoreW SetConsoleCtrlHandler SetCurrentDirectoryW WriteProfileSectionW WriteProfileStringA SetConsoleTitleW VirtualProtect GetFileAttributesExW GetCPInfoExA _lopen FindAtomW GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId ReadConsoleOutputCharacterW GetProfileSectionW AreFileApisANSI CommConfigDialogW GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError LeaveCriticalSection EnterCriticalSection GetFileType WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers GetModuleHandleA

user32

GetMenuInfo GetListBoxInfo

Sharing

General

Malware Config

Signatures

File Explorer

fb660cd8294a2f697bc610d746833d91_JaffaCakes118

kernel32

user32

generic