5f280e312f4b1e5b6ed2b6011bc81fd0_JaffaCakes118

Resubmissions

20/05/2024, 22:18

240520-176b4aaa9z10

20/05/2024, 12:48

240520-p1181sbd2510

Sharing

Copy URL Twitter E-mail

General

Target
5f280e312f4b1e5b6ed2b6011bc81fd0_JaffaCakes118
Size 242KB
Sample240520-176b4aaa9z
SHA256 33c05bb54f0fce069d75a4e13e90f0a130baff6e0d39d9782a3f467abd02803e
MD5 5f280e312f4b1e5b6ed2b6011bc81fd0
SHA1 4688cd7a7fa45cd4ba2fc7dd2cdb1e7bde05c8ad
SHA512 a0f5f5da986f32c6c249770fdbe1e7d23ff737ef084b0c8cb6d6fdb3551e76f68cecb109f84020e5915531a003fbf997b86a89086caf2cecc7f64663ef36feda
SSDEEP 3072:ETTN2tJKbLZX7CNRxfs22QUdBhclxrfBub9rZBbZPm2qsiI+Pv8eKDkbNVsPHNw:rJKbLZX7g2QhHVuJrZBFP/+X8PHfq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f280e312f4b1e5b6ed2b6011bc81fd0_JaffaCakes118

File Explorer

5f280e312f4b1e5b6ed2b6011bc81fd0_JaffaCakes118

.exe 242KB

5f280e312f4b1e5b6ed2b6011bc81fd0_JaffaCakes118

IMPHASH eb56c140e8436d0b41c64e3c2984c0b0
SHA256 33c05bb54f0fce069d75a4e13e90f0a130baff6e0d39d9782a3f467abd02803e
MD5 5f280e312f4b1e5b6ed2b6011bc81fd0
SHA1 4688cd7a7fa45cd4ba2fc7dd2cdb1e7bde05c8ad
SHA512 a0f5f5da986f32c6c249770fdbe1e7d23ff737ef084b0c8cb6d6fdb3551e76f68cecb109f84020e5915531a003fbf997b86a89086caf2cecc7f64663ef36feda
SSDEEP 3072:ETTN2tJKbLZX7CNRxfs22QUdBhclxrfBub9rZBbZPm2qsiI+Pv8eKDkbNVsPHNw:rJKbLZX7g2QhHVuJrZBFP/+X8PHfq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

36418

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapLock GlobalAlloc InterlockedIncrement GetConsoleCP GetPrivateProfileSectionA SetEvent DeleteCriticalSection LocalLock GetModuleFileNameA GetCurrentActCtx FindActCtxSectionStringW SetEndOfFile GetFileAttributesW ReleaseMutex SleepEx WaitForSingleObject FindResourceExW EndUpdateResourceA GetConsoleTitleA FreeConsole SetConsoleTitleW LoadLibraryA LocalAlloc GetProcAddress CommConfigDialogA GetFileAttributesA HeapAlloc GetCurrentProcess lstrlenW ReadFileEx ReadFile InterlockedDecrement Sleep InitializeCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW ExitProcess WriteFile TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle WideCharToMultiByte CloseHandle CreateFileA LCMapStringA LCMapStringW GetConsoleMode FlushFileBuffers GetProcessHeap WriteConsoleA GetConsoleOutputCP WriteConsoleW

gdi32

GetCharWidthFloatW

Name

.text

Size

76KB

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

90KB

Virtual Size

73.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.goyuw

Size

27KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fusiba

Size

1024B

Virtual Size

626B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.nilab

Size

512B

Virtual Size

23B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.deto

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.xovupuk

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

5f280e312f4b1e5b6ed2b6011bc81fd0_JaffaCakes118

kernel32

gdi32

generic