f97054aaa5b42015f5fd24bd6d66fb5c_JaffaCakes118

General

Target
f97054aaa5b42015f5fd24bd6d66fb5c_JaffaCakes118
Size 495KB
Sample240419-edasfagh4z
SHA256 b987b62195f982a1b4b8bccfc559b20f96581c945b1fa3c7a4685ff8c7112db5
MD5 f97054aaa5b42015f5fd24bd6d66fb5c
SHA1 9d5173179863c1d37138ecdc247e0c5ae9a1eb7e
SHA512 e82bda3b010c01c97ce023df0b85ef26f08d5d9ad61dcbdd3ba3562469e69185578cd866e9edfa941c978728e5db06b6876d7fcc75ebb1511b5a4521aaad547a
SSDEEP 6144:8Vaqs32HMBdaUjwwaFOTF4A1Otgqpm5kIha+NQUYhXTtyMShcp2TNrPSBxJg:QOdxjjaFkftqcVha+Ihic0BP2Y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f97054aaa5b42015f5fd24bd6d66fb5c_JaffaCakes118

File Explorer

f97054aaa5b42015f5fd24bd6d66fb5c_JaffaCakes118

.exe 495KB

f97054aaa5b42015f5fd24bd6d66fb5c_JaffaCakes118

IMPHASH 5db1361d34b46103924e72350663b6e3
SHA256 b987b62195f982a1b4b8bccfc559b20f96581c945b1fa3c7a4685ff8c7112db5
MD5 f97054aaa5b42015f5fd24bd6d66fb5c
SHA1 9d5173179863c1d37138ecdc247e0c5ae9a1eb7e
SHA512 e82bda3b010c01c97ce023df0b85ef26f08d5d9ad61dcbdd3ba3562469e69185578cd866e9edfa941c978728e5db06b6876d7fcc75ebb1511b5a4521aaad547a
SSDEEP 6144:8Vaqs32HMBdaUjwwaFOTF4A1Otgqpm5kIha+NQUYhXTtyMShcp2TNrPSBxJg:QOdxjjaFkftqcVha+Ihic0BP2Y
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

31660

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xutojam.pdb

kernel32

GetComputerNameA SetProcessAffinityMask CreateFileA SetCriticalSectionSpinCount WriteConsoleInputW WriteConsoleOutputCharacterW lstrlenA GetConsoleAliasesLengthW EnumDateFormatsExW EndUpdateResourceW ReadConsoleA GetCurrentProcess InitializeSListHead GetUserDefaultLCID WaitForSingleObject SetEvent GetSystemDefaultLCID GetModuleHandleW VirtualFree SetFileTime GetGeoInfoW ReadConsoleOutputA WriteFile CreateActCtxW ActivateActCtx GetConsoleCP GlobalFindAtomA LoadLibraryW TerminateThread ReadConsoleInputA CopyFileW GetSystemWindowsDirectoryA GetVersionExW DnsHostnameToComputerNameW GetConsoleAliasW SetConsoleCursorPosition CreateActCtxA SetConsoleTitleA GetConsoleOutputCP VerifyVersionInfoW SetLastError GetProcAddress VerLanguageNameA HeapUnlock GetConsoleDisplayMode EnterCriticalSection GetDiskFreeSpaceW LoadLibraryA WriteConsoleA InterlockedExchangeAdd DeleteTimerQueue CreateTapePartition BuildCommDCBAndTimeoutsW SetConsoleDisplayMode UpdateResourceW BuildCommDCBA VirtualProtect GetFileAttributesExW GetCPInfoExA FindFirstVolumeA GetPrivateProfileSectionW GetSystemTime AreFileApisANSI CreateThread CloseHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo ExitProcess GetStdHandle GetModuleFileNameA HeapCreate VirtualAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetHandleCount GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleMode FlushFileBuffers GetLocaleInfoW WriteConsoleW

user32

GetAltTabInfoA RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

f97054aaa5b42015f5fd24bd6d66fb5c_JaffaCakes118

kernel32

user32

generic