f995edd895157fc7850d3f9b37d49852_JaffaCakes118

General

Target
f995edd895157fc7850d3f9b37d49852_JaffaCakes118
Size 525KB
Sample240419-fyht8aag7v
SHA256 87e9d3c3ea420b23d6d8efb0a78d3643b08f17817b44fc53b0351c009163e916
MD5 f995edd895157fc7850d3f9b37d49852
SHA1 77fc2087d3f548b248f6713036b4ef1ff0217e18
SHA512 6446a84707839bdc901f9019e3328b9367122f6eef596d0ffb67fa3e92d0693e990135761d289d2395a2fac3d44a0577194be2b1adc29d5046870d94d90e1fe4
SSDEEP 12288:3+1mpn//Jk7JGgSgRClWF0mPjUdwnfIPx+zMzgRs:u+nHa/wsF0YswgJ+zt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f995edd895157fc7850d3f9b37d49852_JaffaCakes118

File Explorer

f995edd895157fc7850d3f9b37d49852_JaffaCakes118

.exe 525KB

f995edd895157fc7850d3f9b37d49852_JaffaCakes118

IMPHASH 3c64d9fed135391cddffd03c67e8465b
SHA256 87e9d3c3ea420b23d6d8efb0a78d3643b08f17817b44fc53b0351c009163e916
MD5 f995edd895157fc7850d3f9b37d49852
SHA1 77fc2087d3f548b248f6713036b4ef1ff0217e18
SHA512 6446a84707839bdc901f9019e3328b9367122f6eef596d0ffb67fa3e92d0693e990135761d289d2395a2fac3d44a0577194be2b1adc29d5046870d94d90e1fe4
SSDEEP 12288:3+1mpn//Jk7JGgSgRClWF0mPjUdwnfIPx+zMzgRs:u+nHa/wsF0YswgJ+zt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7856

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dafopajamadugu\zewababogemuk_yatefixaboc48-miye.pdb

kernel32

GetCommandLineW GetThreadContext FileTimeToDosDateTime EnumResourceNamesW SetPriorityClass GetNativeSystemInfo lstrlenA GetConsoleAliasesLengthW CopyFileExW TlsGetValue GetDriveTypeW SetEndOfFile InterlockedIncrement GetCommState InterlockedDecrement GetSystemWindowsDirectoryW GetNamedPipeHandleStateA WaitForSingleObject SetEvent FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetSystemTimeAsFileTime GetPrivateProfileStringW WriteFile FindResourceExA GetPrivateProfileIntA LoadLibraryW GetConsoleMode CopyFileW SetConsoleMode SetConsoleCursorPosition IsDBCSLeadByte GetOverlappedResult GetStartupInfoW GlobalUnlock LCMapStringA GetFileSizeEx GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc OpenMutexA LocalAlloc IsSystemResumeAutomatic SetCurrentDirectoryW WriteProfileSectionW HeapWalk FindAtomA Process32NextW CreateIoCompletionPort FindFirstChangeNotificationA FreeEnvironmentStringsW FatalAppExitA GetCurrentThreadId SetThreadAffinityMask OpenSemaphoreW DeleteFileW ReadConsoleOutputCharacterW GetSystemTime CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr RaiseException Sleep ExitProcess GetModuleFileNameA GetStdHandle TlsAlloc TlsSetValue TlsFree EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW DeleteCriticalSection GetACP GetOEMCP GetCPInfo IsValidCodePage SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount RtlUnwind DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle GetModuleHandleA

user32

GetTitleBarInfo

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

f995edd895157fc7850d3f9b37d49852_JaffaCakes118

kernel32

user32

winhttp

generic