fa43acf24421ef19fdea1e85fa4d5030_JaffaCakes118

General

Target
fa43acf24421ef19fdea1e85fa4d5030_JaffaCakes118
Size 484KB
Sample240419-pbad1acc31
SHA256 d6f36585bba98da377675690c0d42956ae105e3b3a6e7210c0c27e46fe84f7e3
MD5 fa43acf24421ef19fdea1e85fa4d5030
SHA1 c7253c22f33a2f36f435a296d68e34aab08d4ed3
SHA512 175c3e6e22aea6bac93e4cc4cffe4880965161f00bce1eb13523e2a04a68abfb690f8ae9aaab826aabea96360e8d67503d946a5db2d4de9bc08dea79a4950178
SSDEEP 12288:z2Nlz0IQrPx411sib2Rsbtfq+vnlT72sbmYX/to6pzjr:Kdqx41Oib2RM1q+Z2sbH/jt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa43acf24421ef19fdea1e85fa4d5030_JaffaCakes118

File Explorer

fa43acf24421ef19fdea1e85fa4d5030_JaffaCakes118

.exe 484KB

fa43acf24421ef19fdea1e85fa4d5030_JaffaCakes118

IMPHASH e3d6341e28c6bbcc1b62678f16dfd32d
SHA256 d6f36585bba98da377675690c0d42956ae105e3b3a6e7210c0c27e46fe84f7e3
MD5 fa43acf24421ef19fdea1e85fa4d5030
SHA1 c7253c22f33a2f36f435a296d68e34aab08d4ed3
SHA512 175c3e6e22aea6bac93e4cc4cffe4880965161f00bce1eb13523e2a04a68abfb690f8ae9aaab826aabea96360e8d67503d946a5db2d4de9bc08dea79a4950178
SSDEEP 12288:z2Nlz0IQrPx411sib2Rsbtfq+vnlT72sbmYX/to6pzjr:Kdqx41Oib2RM1q+Z2sbH/jt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8594

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vasepubuvi29\jate\noco50_nod\73.pdb

kernel32

SetLocalTime lstrcpynA GetDefaultCommConfigW DeleteVolumeMountPointA InterlockedIncrement ReadConsoleA InterlockedDecrement GetSystemWindowsDirectoryW GetEnvironmentStringsW GetUserDefaultLCID SetEvent GetSystemDefaultLCID GetFileAttributesExA GetEnvironmentStrings GlobalAlloc ReadConsoleInputA CopyFileW LeaveCriticalSection GetComputerNameExA UnregisterWait WriteConsoleW GetAtomNameW ReadFile GetACP GetConsoleOutputCP VerifyVersionInfoW GetCPInfoExW GetProcAddress GetLongPathNameA VerLanguageNameW CreateTapePartition GetModuleFileNameA SetConsoleTitleW GetModuleHandleA PeekConsoleInputA Module32NextW GetCurrentProcessId AddConsoleAliasA EnumCalendarInfoExA FindNextVolumeA LCMapStringW GetCommandLineW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA GetModuleHandleW Sleep ExitProcess GetLastError WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize EnterCriticalSection SetHandleCount GetFileType DeleteCriticalSection SetFilePointer FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LoadLibraryA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode GetCPInfo GetOEMCP IsValidCodePage RaiseException HeapAlloc HeapReAlloc VirtualAlloc RtlUnwind SetStdHandle FlushFileBuffers GetLocaleInfoA WriteConsoleA MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

fa43acf24421ef19fdea1e85fa4d5030_JaffaCakes118

kernel32

generic