fa7c6161052a1f948ae77285e7bf45ed_JaffaCakes118

General

Target
fa7c6161052a1f948ae77285e7bf45ed_JaffaCakes118
Size 12.0MB
Sample240419-rl82esee32
SHA256 cda2e2bc07f9772d45f63b77f0b0d1754b8a10fa1420b68afb10a8b71f9b8e50
MD5 fa7c6161052a1f948ae77285e7bf45ed
SHA1 366b0ba9f8fb650ff2b6e69b288037c4d2d12118
SHA512 66c062616dd3df436c4829ad48771b782c688066dcee9c73446d1e326efe13d4da7a253a01b8904bfd6b2fc08a782b607b843542a91175df5ec68e9b51df9ae8
SSDEEP 196608:4Lad4qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqn:4L
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa7c6161052a1f948ae77285e7bf45ed_JaffaCakes118

File Explorer

fa7c6161052a1f948ae77285e7bf45ed_JaffaCakes118

.exe 12.0MB

fa7c6161052a1f948ae77285e7bf45ed_JaffaCakes118

IMPHASH 56224a64339684be7c7ed8cfa70e9258
SHA256 cda2e2bc07f9772d45f63b77f0b0d1754b8a10fa1420b68afb10a8b71f9b8e50
MD5 fa7c6161052a1f948ae77285e7bf45ed
SHA1 366b0ba9f8fb650ff2b6e69b288037c4d2d12118
SHA512 66c062616dd3df436c4829ad48771b782c688066dcee9c73446d1e326efe13d4da7a253a01b8904bfd6b2fc08a782b607b843542a91175df5ec68e9b51df9ae8
SSDEEP 196608:4Lad4qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqn:4L
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xetubesiduhec\sobexahefapuw.pdb

kernel32

GetCommandLineW GetThreadContext lstrlenA InterlockedIncrement GetQueuedCompletionStatus GetCommState GetSystemWindowsDirectoryW GetProfileStringW SetConsoleScreenBufferSize CallNamedPipeW FreeEnvironmentStringsA SetTapeParameters CreateNamedPipeW GetCompressedFileSizeW CreateActCtxW FindResourceExA GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetSystemWow64DirectoryW HeapDestroy CreateSemaphoreA GetBinaryTypeA QueryInformationJobObject GetStartupInfoW LCMapStringA GetPrivateProfileIntW GetLastError SetLastError GetProcAddress SetStdHandle SearchPathA LocalAlloc GetNumberFormatW FindAtomA GetModuleFileNameA FindNextFileA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation GetCurrentDirectoryA OutputDebugStringA GetCPInfoExA FindAtomW DeleteFileW GetSystemTime CopyFileExA InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW WriteFile GetStdHandle EnterCriticalSection LeaveCriticalSection RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW HeapValidate IsBadReadPtr HeapCreate SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeW LCMapStringW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent FlushFileBuffers ReadFile RaiseException CreateFileW CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

fa7c6161052a1f948ae77285e7bf45ed_JaffaCakes118

kernel32

generic