fe71a5cc8c5564f2e1b9e4e63eb48fc5_JaffaCakes118

General

Target
fe71a5cc8c5564f2e1b9e4e63eb48fc5_JaffaCakes118
Size 12.2MB
Sample240421-e64k8abe81
SHA256 42ebc1e3ce246575703ca88ab049be62f7a729ac743f5f9e6a45e68d04fec38a
MD5 fe71a5cc8c5564f2e1b9e4e63eb48fc5
SHA1 ae2f00b7bc2fb6cbfae3622b6031c5bb411e0bc5
SHA512 fda1dcb122f442540741567cd4b4c8b452648742df2701494c88c6a296d878a900b7dc65831f4497fe95acf48567b71d1248e23aabc6bc45aef3614fc075a3c4
SSDEEP 393216:Muuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe71a5cc8c5564f2e1b9e4e63eb48fc5_JaffaCakes118

File Explorer

fe71a5cc8c5564f2e1b9e4e63eb48fc5_JaffaCakes118

.exe 12.2MB

fe71a5cc8c5564f2e1b9e4e63eb48fc5_JaffaCakes118

IMPHASH 1a5fe3d7e91739366ce1a49344f056ba
SHA256 42ebc1e3ce246575703ca88ab049be62f7a729ac743f5f9e6a45e68d04fec38a
MD5 fe71a5cc8c5564f2e1b9e4e63eb48fc5
SHA1 ae2f00b7bc2fb6cbfae3622b6031c5bb411e0bc5
SHA512 fda1dcb122f442540741567cd4b4c8b452648742df2701494c88c6a296d878a900b7dc65831f4497fe95acf48567b71d1248e23aabc6bc45aef3614fc075a3c4
SSDEEP 393216:Muuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu:
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10027

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\revujafu\cohicigotofa\45\diyukuy\rutam\fufilayemalu9 kevipiceri.pdb

kernel32

CreateTimerQueue WriteConsoleOutputCharacterW lstrlenA GetConsoleAliasesLengthW EnumDateFormatsExW GetDefaultCommConfigW HeapAlloc _lwrite InterlockedDecrement GetCurrentProcess GetSystemWindowsDirectoryW SetEnvironmentVariableW GetUserDefaultLCID SetConsoleScreenBufferSize SetVolumeMountPointW GetModuleHandleW GetConsoleAliasesLengthA GetCommandLineA GetEnvironmentStrings GetConsoleCP ReadConsoleInputA WriteConsoleOutputA lstrcpynW GetFileAttributesW LocalReAlloc HeapQueryInformation GetMailslotInfo ReadFile GetVolumeNameForVolumeMountPointA GetTimeZoneInformation GetConsoleOutputCP InterlockedExchange ChangeTimerQueueTimer SetLastError GetProcAddress PeekConsoleInputW GetComputerNameExW BeginUpdateResourceW RemoveDirectoryA EnterCriticalSection ResetEvent GetLocalTime LoadLibraryA OpenMutexA WriteConsoleA GlobalGetAtomNameW GetCurrentConsoleFont GetOEMCP GetConsoleTitleW BuildCommDCBA VirtualProtect GetFileAttributesExW SetCalendarInfoA FindFirstVolumeA ReleaseMutex GetCurrentProcessId GetConsoleProcessList EnumCalendarInfoExA GetModuleFileNameW GetSystemDefaultLangID CreateFileA SetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoA RaiseException RtlUnwind GetLastError WriteFile GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent HeapFree LeaveCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId DeleteCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle WriteConsoleW

user32

RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

fe71a5cc8c5564f2e1b9e4e63eb48fc5_JaffaCakes118

kernel32

user32

generic