1489cae273b50f220bac06fe25b070a6_JaffaCakes118

General

Target
1489cae273b50f220bac06fe25b070a6_JaffaCakes118
Size 279KB
Sample240627-d5pj8staql
SHA256 9f36944a8830046942b6f798ba00cd7936ad0cedddaa22236c6691b329e044b8
MD5 1489cae273b50f220bac06fe25b070a6
SHA1 fc330ff77a46bc464331d74509270b9c0f8fc48b
SHA512 155669ff6a5aec3d43361141be5e904cc925d979fdec8b03f8955e04daea54cec3b2651c1f1c0ce922cd61753d1e84adb5f615ad79a91ade7be5c993c3ff2b5f
SSDEEP 6144:mJzsULX+XXEgSibCUtmbXWfp88iSGNaROhxxpeTr/ekI:qzraXXEqAbClwPzxp6L
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1489cae273b50f220bac06fe25b070a6_JaffaCakes118

File Explorer

1489cae273b50f220bac06fe25b070a6_JaffaCakes118

.exe 279KB

1489cae273b50f220bac06fe25b070a6_JaffaCakes118

IMPHASH c15bb6cf111ec297d5d1e54944f0caf3
SHA256 9f36944a8830046942b6f798ba00cd7936ad0cedddaa22236c6691b329e044b8
MD5 1489cae273b50f220bac06fe25b070a6
SHA1 fc330ff77a46bc464331d74509270b9c0f8fc48b
SHA512 155669ff6a5aec3d43361141be5e904cc925d979fdec8b03f8955e04daea54cec3b2651c1f1c0ce922cd61753d1e84adb5f615ad79a91ade7be5c993c3ff2b5f
SSDEEP 6144:mJzsULX+XXEgSibCUtmbXWfp88iSGNaROhxxpeTr/ekI:qzraXXEqAbClwPzxp6L
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

17786

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tiwewamuyipati15\nadajafofiy_rolejejaka\wuleruwo27\fiwike.pdb

kernel32

HeapReAlloc GlobalDeleteAtom GetLocaleInfoA InterlockedIncrement GetQueuedCompletionStatus GetEnvironmentStringsW SetEvent ReadConsoleW GetCommandLineA CreateActCtxW GlobalAlloc CopyFileW FreeConsole LeaveCriticalSection HeapCreate GetFileAttributesW WriteConsoleW GetModuleFileNameW lstrlenW SetConsoleTitleA FlushFileBuffers DeactivateActCtx InterlockedExchange GetProcAddress BeginUpdateResourceW RemoveDirectoryA VerLanguageNameW LocalAlloc SetConsoleWindowInfo GetTapeParameters SetEnvironmentVariableA SetConsoleTitleW GetModuleHandleA EraseTape VirtualProtect EndUpdateResourceA FindFirstVolumeW GetCurrentProcessId GetPrivateProfileSectionW FindNextVolumeA lstrcpyW GetConsoleOutputCP WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW VirtualFree VirtualAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer CloseHandle ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount CreateFileA SetStdHandle GetConsoleCP GetConsoleMode LoadLibraryA GetLocaleInfoW SetEndOfFile GetProcessHeap ReadFile WriteConsoleA

Sharing

General

Malware Config

Signatures

File Explorer

1489cae273b50f220bac06fe25b070a6_JaffaCakes118

kernel32

generic