fcf272ea4e9a7e3fcaecfdcfb26cbd97_JaffaCakes118

General

Target
fcf272ea4e9a7e3fcaecfdcfb26cbd97_JaffaCakes118
Size 535KB
Sample240420-rl99gsba7w
SHA256 7d488eb1040f11cfdf31e5cc017f253bc9050bae1cfd474492018c314504c9bd
MD5 fcf272ea4e9a7e3fcaecfdcfb26cbd97
SHA1 ff69bd1ec96fb6ca44f73a829f937b3d29168342
SHA512 c327f371b606bd5873047469f9c210d6183506a25f58e86acb62385f8bad9eeee908cdb160d95f42f9e9f630eeab65d13542700bbe2ff012c3dd1dba96f621e0
SSDEEP 12288:tAHOVUBtvt5t4LTl3brVqOyBQxzYk16xhsTQh7ekN2:tuxvt5sZHVKGahsTQhekN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcf272ea4e9a7e3fcaecfdcfb26cbd97_JaffaCakes118

File Explorer

fcf272ea4e9a7e3fcaecfdcfb26cbd97_JaffaCakes118

.exe 535KB

fcf272ea4e9a7e3fcaecfdcfb26cbd97_JaffaCakes118

IMPHASH 93a0ca4b4569eae2a4959be5cfc00df3
SHA256 7d488eb1040f11cfdf31e5cc017f253bc9050bae1cfd474492018c314504c9bd
MD5 fcf272ea4e9a7e3fcaecfdcfb26cbd97
SHA1 ff69bd1ec96fb6ca44f73a829f937b3d29168342
SHA512 c327f371b606bd5873047469f9c210d6183506a25f58e86acb62385f8bad9eeee908cdb160d95f42f9e9f630eeab65d13542700bbe2ff012c3dd1dba96f621e0
SSDEEP 12288:tAHOVUBtvt5t4LTl3brVqOyBQxzYk16xhsTQh7ekN2:tuxvt5sZHVKGahsTQhekN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

345783

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yefoluwusewepu\fepatujeb57 pifewavamixab\wavutodukob\g.pdb

kernel32

EnterCriticalSection InterlockedExchangeAdd EraseTape GetUserDefaultLangID CreateActCtxW GetCPInfoExW WriteConsoleInputW ReadConsoleInputA InterlockedPopEntrySList SetConsoleDisplayMode CreateConsoleScreenBuffer VerifyVersionInfoA CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionW EnumDateFormatsExA GetCurrentProcessId LoadLibraryA IsDebuggerPresent SetConsoleCP FindFirstVolumeA WriteFile BuildCommDCBW VerLanguageNameA SetFileApisToANSI WriteProcessMemory SetEvent GetExitCodeThread EndUpdateResourceW GetCPInfo GetLastError UpdateResourceA SetConsoleTitleW SetFilePointer LoadLibraryExA CopyFileW GetConsoleAliasesLengthW ReadConsoleA ActivateActCtx AddRefActCtx HeapLock DnsHostnameToComputerNameA ReadConsoleOutputA GetProcessHeaps GetSystemWindowsDirectoryA GetUserDefaultLCID BuildCommDCBAndTimeoutsW HeapAlloc UnmapViewOfFile GetAtomNameA HeapSize GetGeoInfoW GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetProcessAffinityMask WaitForSingleObject SetConsoleCursorInfo VerifyVersionInfoW WriteConsoleOutputCharacterW GetFileAttributesExA GetComputerNameW CommConfigDialogW GetConsoleAliasA GetConsoleWindow GetSystemTimeAsFileTime GetDiskFreeSpaceA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapReAlloc GetCommandLineA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount SetStdHandle LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

user32

GetAltTabInfoA RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

fcf272ea4e9a7e3fcaecfdcfb26cbd97_JaffaCakes118

kernel32

user32

generic