fa9326c718469931dba84779b71f4350_JaffaCakes118

General

Target
fa9326c718469931dba84779b71f4350_JaffaCakes118
Size 486KB
Sample240419-sk7mmsfe32
SHA256 dd631fc6635483d84cbd3836d4815e2f06107cbe18b16134dd9fca7ea9a4872d
MD5 fa9326c718469931dba84779b71f4350
SHA1 82afa63936a212149c787f87cdc07c2293f3806c
SHA512 bf69f7a0e28488d197f2ac78e6f27160eeeb76927c5f5d96e40354f04ab3a1fa96fe99e309baa8fc5dcf2801e1f7e08544c9166a018931323f75519f2a3a19b6
SSDEEP 12288:PKOtTqqQMJ2uTMH4JqsyCHGTP4yEFs1mMeGyFS:SITqqQMwH4EsLGNmMiF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa9326c718469931dba84779b71f4350_JaffaCakes118

File Explorer

fa9326c718469931dba84779b71f4350_JaffaCakes118

.exe 486KB

fa9326c718469931dba84779b71f4350_JaffaCakes118

IMPHASH 6c734257ddf94eda6ae0d5d1c88d7157
SHA256 dd631fc6635483d84cbd3836d4815e2f06107cbe18b16134dd9fca7ea9a4872d
MD5 fa9326c718469931dba84779b71f4350
SHA1 82afa63936a212149c787f87cdc07c2293f3806c
SHA512 bf69f7a0e28488d197f2ac78e6f27160eeeb76927c5f5d96e40354f04ab3a1fa96fe99e309baa8fc5dcf2801e1f7e08544c9166a018931323f75519f2a3a19b6
SSDEEP 12288:PKOtTqqQMJ2uTMH4JqsyCHGTP4yEFs1mMeGyFS:SITqqQMwH4EsLGNmMiF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

342775

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\botodezudu\41 nodojofuluwu_fohoj39\tokafi\9.pdb

kernel32

AddRefActCtx GetCPInfoExA WriteConsoleInputA ReadConsoleInputW SetTapeParameters WaitCommEvent WriteTapemark SetConsoleCP VerifyVersionInfoA WaitNamedPipeW GetConsoleAliasesW WriteConsoleW GetLastError CreateFileA DeleteFileW WritePrivateProfileSectionA GetPrivateProfileSectionW InitializeCriticalSectionAndSpinCount RequestDeviceWakeup LoadLibraryA IsDebuggerPresent GetLongPathNameW ReadFile WriteFile GetProfileSectionA BuildCommDCBA FindActCtxSectionStringW SetEndOfFile SetFileShortNameW WriteProcessMemory GetFileAttributesW GetSystemDefaultLCID PulseEvent SleepEx WaitForSingleObject WaitForMultipleObjects SetConsoleTextAttribute AllocConsole SetConsoleCtrlHandler SetConsoleTitleA GenerateConsoleCtrlEvent GetCurrentConsoleFont SetConsoleWindowInfo AttachConsole GetConsoleAliasesLengthW ReadConsoleA GetProcessHeap BuildCommDCBAndTimeoutsA GetGeoInfoA GetCurrentProcess GetProcAddress GetModuleHandleA CreateThread GetProcessHeaps GetACP VerifyVersionInfoW FindAtomA SetFileApisToOEM OpenWaitableTimerW HeapValidate GetDiskFreeSpaceA GetTapePosition EnumDateFormatsW SetEvent InterlockedPopEntrySList GetCommandLineA GetStartupInfoA HeapAlloc EnterCriticalSection LeaveCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetCPInfo GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc RtlUnwind MultiByteToWideChar SetStdHandle LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize CloseHandle WriteConsoleA GetConsoleOutputCP

user32

GetAltTabInfoW

advapi32

AdjustTokenPrivileges MapGenericMask AreAnyAccessesGranted AdjustTokenGroups

Sharing

General

Malware Config

Signatures

File Explorer

fa9326c718469931dba84779b71f4350_JaffaCakes118

kernel32

user32

advapi32

generic