fc3bb27a0cf68b519a1ff98126da4083_JaffaCakes118

General

Target
fc3bb27a0cf68b519a1ff98126da4083_JaffaCakes118
Size 10.4MB
Sample240420-h8jklsbe76
SHA256 57c5476b2f41ec87a6b74153c52b442d47172ad8f59a578e4ac6e902dec3be3f
MD5 fc3bb27a0cf68b519a1ff98126da4083
SHA1 d52434e6d7326478e4d2931b379ed30c31ead569
SHA512 8fded19f127deaa5d52d8c88b89009ebf1626ada44556fcc50e9cd048c399c31d89668232db2790afbbbf0072cb5806a7f00e92391c0815f39211cbf9c7ffcdc
SSDEEP 3072:EOsUA8KZQ/IxsPVg4nkvzaHWgSjqdF0w2Uyopz9ZeCqJXXfehv1Ijoxw9xkaaaaK:eUA8GV2e4nYWHEjqPt9cCqxmhv1pxQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc3bb27a0cf68b519a1ff98126da4083_JaffaCakes118

File Explorer

fc3bb27a0cf68b519a1ff98126da4083_JaffaCakes118

.exe 10.4MB

fc3bb27a0cf68b519a1ff98126da4083_JaffaCakes118

IMPHASH a9e1103bbc08b87eea5d7311fb0b7c3e
SHA256 57c5476b2f41ec87a6b74153c52b442d47172ad8f59a578e4ac6e902dec3be3f
MD5 fc3bb27a0cf68b519a1ff98126da4083
SHA1 d52434e6d7326478e4d2931b379ed30c31ead569
SHA512 8fded19f127deaa5d52d8c88b89009ebf1626ada44556fcc50e9cd048c399c31d89668232db2790afbbbf0072cb5806a7f00e92391c0815f39211cbf9c7ffcdc
SSDEEP 3072:EOsUA8KZQ/IxsPVg4nkvzaHWgSjqdF0w2Uyopz9ZeCqJXXfehv1Ijoxw9xkaaaaK:eUA8GV2e4nYWHEjqPt9cCqxmhv1pxQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pufikebejuse\b.pdb

kernel32

FreeLibrary InterlockedIncrement GetCommState GetProfileStringW CallNamedPipeW GetNumberFormatA GetCommandLineA FindResourceExA GlobalAlloc GetPrivateProfileIntA GetVolumeInformationA GetSystemWow64DirectoryW GetSystemWindowsDirectoryA HeapDestroy GetCompressedFileSizeA GetSystemDirectoryA CreateActCtxA GetBinaryTypeW WritePrivateProfileStringW LCMapStringA GetStartupInfoA SetThreadLocale GetStdHandle CopyFileExW GetLastError SetLastError GetProcAddress CreateNamedPipeA SearchPathA LoadLibraryA OpenMutexA CreateSemaphoreW FindAtomA SetSystemTime GetModuleFileNameA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation FreeEnvironmentStringsW FindNextFileW GetCurrentDirectoryA SetFileShortNameA TerminateJobObject FindAtomW UnregisterWaitEx DeleteFileA lstrlenA GetCPInfoExW GetThreadContext CloseHandle CreateFileW WideCharToMultiByte EncodePointer DecodePointer GetCommandLineW GetStartupInfoW InterlockedDecrement GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree HeapValidate IsBadReadPtr QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate EnterCriticalSection LeaveCriticalSection LoadLibraryW IsProcessorFeaturePresent OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree SetFilePointer GetConsoleCP GetConsoleMode RaiseException SetStdHandle FlushFileBuffers

advapi32

InitiateSystemShutdownA AbortSystemShutdownA

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

fc3bb27a0cf68b519a1ff98126da4083_JaffaCakes118

kernel32

advapi32

winhttp

generic