fbc99821520778092821a62de107079c_JaffaCakes118

General

Target
fbc99821520778092821a62de107079c_JaffaCakes118
Size 489KB
Sample240420-dj5dkaef46
SHA256 94eb1d9610d4221eb16f0e5add273722dfbaa8f939c9c16a2de46ed2f0f66018
MD5 fbc99821520778092821a62de107079c
SHA1 632003ea9f100f52e758bd01fe4c158d031547bc
SHA512 460a4ac5577ef8ac788142ffb07fac5468b20f2cb0fd59cc0ade41b2af5d5de405334c821d586ab117684130ec2923dd65d4b1bf396aab2b54e788fcf4ed0429
SSDEEP 12288:JbasC9W99TEsih9gZ+k3GFscRiq14xlfWQHxU7:zConjyfTFfRgl+QRU7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbc99821520778092821a62de107079c_JaffaCakes118

File Explorer

fbc99821520778092821a62de107079c_JaffaCakes118

.exe 489KB

fbc99821520778092821a62de107079c_JaffaCakes118

IMPHASH 63fc28335e602552107036f2ceb974a9
SHA256 94eb1d9610d4221eb16f0e5add273722dfbaa8f939c9c16a2de46ed2f0f66018
MD5 fbc99821520778092821a62de107079c
SHA1 632003ea9f100f52e758bd01fe4c158d031547bc
SHA512 460a4ac5577ef8ac788142ffb07fac5468b20f2cb0fd59cc0ade41b2af5d5de405334c821d586ab117684130ec2923dd65d4b1bf396aab2b54e788fcf4ed0429
SSDEEP 12288:JbasC9W99TEsih9gZ+k3GFscRiq14xlfWQHxU7:zConjyfTFfRgl+QRU7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xijetu.pdb

kernel32

GetCommandLineW GetNativeSystemInfo lstrlenA TlsGetValue GetStringTypeA InterlockedIncrement GetQueuedCompletionStatus ReadConsoleA FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetPrivateProfileStringW WriteFile SetCommState GlobalAlloc LoadLibraryW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GlobalFlags GetExitCodeProcess IsDBCSLeadByte ReadFile GetStartupInfoW GlobalUnlock GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc CopyFileA LoadLibraryA CreateSemaphoreW GetFileType SetCurrentDirectoryW HeapWalk FindAtomA Process32NextW FreeEnvironmentStringsW EnumResourceNamesA GetCurrentThreadId GetCPInfoExA SetThreadAffinityMask FindAtomW DeleteFileW GetSystemTime CopyFileExA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetCommandLineA UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsSetValue TlsFree SetLastError QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc InitializeCriticalSectionAndSpinCount LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

fbc99821520778092821a62de107079c_JaffaCakes118

kernel32

generic