1ab83e7ec4c3ee17c1c634ab184ccb64_JaffaCakes118

General

Target
1ab83e7ec4c3ee17c1c634ab184ccb64_JaffaCakes118
Size 10.2MB
Sample240701-k5rsxsshpe
SHA256 69f551998396b69211de7617d4be4fb25eba4d5ccf33f7c2305a90a1c592e944
MD5 1ab83e7ec4c3ee17c1c634ab184ccb64
SHA1 a17551f428f71a31115b2bfe359180c29467e09f
SHA512 999892fc83da3165b84eb700276b789fa58573c3146da9c395dc40516c499698426c72db199976bfbbae4ea1a7255440e0ba12dfaf5e7d7a1c4ba6dfbc06364c
SSDEEP 49152:9PQwlooooooooooooooooooooooooooooooooooooooooooooooooooooooooooH:dQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ab83e7ec4c3ee17c1c634ab184ccb64_JaffaCakes118

File Explorer

1ab83e7ec4c3ee17c1c634ab184ccb64_JaffaCakes118

.exe 10.2MB

1ab83e7ec4c3ee17c1c634ab184ccb64_JaffaCakes118

IMPHASH 410705447b2186b51cd6d6e90a878e3a
SHA256 69f551998396b69211de7617d4be4fb25eba4d5ccf33f7c2305a90a1c592e944
MD5 1ab83e7ec4c3ee17c1c634ab184ccb64
SHA1 a17551f428f71a31115b2bfe359180c29467e09f
SHA512 999892fc83da3165b84eb700276b789fa58573c3146da9c395dc40516c499698426c72db199976bfbbae4ea1a7255440e0ba12dfaf5e7d7a1c4ba6dfbc06364c
SSDEEP 49152:9PQwlooooooooooooooooooooooooooooooooooooooooooooooooooooooooooH:dQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

11714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tikeda\xukaf wop\yefavadeyal.pdb

kernel32

LoadResource InterlockedIncrement ReadConsoleA GetCurrentProcess GetSystemWindowsDirectoryW GetEnvironmentStringsW WaitForSingleObject GetSystemDefaultLCID QueryActCtxW LeaveCriticalSection VerifyVersionInfoA GetModuleFileNameW GetLocaleInfoA GetProcAddress EnterCriticalSection DisableThreadLibraryCalls ResetEvent OpenMutexA WriteConsoleA LocalAlloc SetConsoleOutputCP GlobalGetAtomNameW WaitForMultipleObjects SetSystemTime GetModuleFileNameA GetModuleHandleA EraseTape FindFirstVolumeA GetCurrentProcessId AddConsoleAliasA FindActCtxSectionStringW ReleaseSemaphore GetCommandLineW GetLastError HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree VirtualAlloc CloseHandle Sleep ExitProcess WriteFile FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize LoadLibraryA SetEndOfFile GetProcessHeap MultiByteToWideChar ReadFile GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetConsoleOutputCP WriteConsoleW

user32

RealChildWindowFromPoint

advapi32

CloseEventLog

winhttp

WinHttpSetOption

Sharing

General

Malware Config

Signatures

File Explorer

1ab83e7ec4c3ee17c1c634ab184ccb64_JaffaCakes118

kernel32

user32

advapi32

winhttp

generic