fd30d28fcbcb1355343d594752b78772_JaffaCakes118

General

Target
fd30d28fcbcb1355343d594752b78772_JaffaCakes118
Size 345KB
Sample240420-vdg5hsde2v
SHA256 d00f87049fb2c7cbbf506ca2361e8295fe06926f17e1d2c16cfe3e88a2902f5a
MD5 fd30d28fcbcb1355343d594752b78772
SHA1 33cb0811591d84b68ce5cb07e1050e4dea0ce6cf
SHA512 5367ea6f2fea98f3942abc25b0c628d34443280f90eeae3d22d10686b428113237dd5708160ee5c790dc12c14a3a5b3505afc2c143d1392b93949cf3749e0f6b
SSDEEP 6144:5CU7yTJH63y+Ah44w19QG3pLKSiUZrNVfs8V:oU7sOp4nS9QuNN2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd30d28fcbcb1355343d594752b78772_JaffaCakes118

File Explorer

fd30d28fcbcb1355343d594752b78772_JaffaCakes118

.exe 345KB

fd30d28fcbcb1355343d594752b78772_JaffaCakes118

IMPHASH 3cdea9fa065b5ffb20003adb7f4144ae
SHA256 d00f87049fb2c7cbbf506ca2361e8295fe06926f17e1d2c16cfe3e88a2902f5a
MD5 fd30d28fcbcb1355343d594752b78772
SHA1 33cb0811591d84b68ce5cb07e1050e4dea0ce6cf
SHA512 5367ea6f2fea98f3942abc25b0c628d34443280f90eeae3d22d10686b428113237dd5708160ee5c790dc12c14a3a5b3505afc2c143d1392b93949cf3749e0f6b
SSDEEP 6144:5CU7yTJH63y+Ah44w19QG3pLKSiUZrNVfs8V:oU7sOp4nS9QuNN2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

151047

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\ramoduvi\nur23\dibizudipamav miyijo-tevomehe 44 rulafiyaluvo.pdb

kernel32

EnterCriticalSection InterlockedExchangeAdd EraseTape GetUserDefaultLangID CreateActCtxW GetCPInfoExW WriteConsoleInputW ReadConsoleInputA InterlockedPopEntrySList SetConsoleDisplayMode CreateConsoleScreenBuffer VerifyVersionInfoA CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionW EnumDateFormatsExA CancelTimerQueueTimer LoadLibraryA FlushInstructionCache SetConsoleCP FindFirstVolumeA WriteFile BuildCommDCBW VerLanguageNameA SetFileApisToANSI WriteProcessMemory SetEvent GetExitCodeThread EndUpdateResourceA GetCPInfo GetLastError UpdateResourceA SetConsoleTitleW SetFilePointer LoadLibraryExA CopyFileW GetConsoleAliasesLengthW ReadConsoleA ActivateActCtx AddRefActCtx HeapLock DnsHostnameToComputerNameA ReadConsoleOutputA GetProcessHeaps GetSystemWindowsDirectoryA GetUserDefaultLCID BuildCommDCBAndTimeoutsW HeapAlloc UnmapViewOfFile GetAtomNameW HeapSize GetGeoInfoW GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetProcessAffinityMask WaitForSingleObject SetConsoleCursorInfo VerifyVersionInfoW WriteConsoleOutputCharacterA GetFileAttributesExA GetComputerNameW CommConfigDialogW GetConsoleAliasA GetConsoleWindow GetSystemTimeAsFileTime GetDiskFreeSpaceA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapReAlloc GetCommandLineA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount SetStdHandle LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

user32

GetAltTabInfoA RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

fd30d28fcbcb1355343d594752b78772_JaffaCakes118

kernel32

user32

generic