4c64a39b8cd718a94c4f8982a4f27fc3_JaffaCakes118

General

Target
4c64a39b8cd718a94c4f8982a4f27fc3_JaffaCakes118
Size 11.7MB
Sample240716-cm8dyszhkj
SHA256 8f821adb70354fb82267e5c52d0ad22663850f535f3d4d97c7dd888109ab2d8e
MD5 4c64a39b8cd718a94c4f8982a4f27fc3
SHA1 8694c0712006fd288510d42071c9c1938ea99946
SHA512 f9dac7001475b489b3961524cbbd99870bd8f8279b44b0aed93cc66103822a70a13df44efaf620bb33037be1e9387103c2db18f7311343d6be4b255c705a40f2
SSDEEP 196608:XT66666666666666666666666666666666666666666666666666666666666666:X
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c64a39b8cd718a94c4f8982a4f27fc3_JaffaCakes118

File Explorer

4c64a39b8cd718a94c4f8982a4f27fc3_JaffaCakes118

.exe 11.7MB

4c64a39b8cd718a94c4f8982a4f27fc3_JaffaCakes118

IMPHASH 949cb2a875d86b476d185d15a2fa1cbb
SHA256 8f821adb70354fb82267e5c52d0ad22663850f535f3d4d97c7dd888109ab2d8e
MD5 4c64a39b8cd718a94c4f8982a4f27fc3
SHA1 8694c0712006fd288510d42071c9c1938ea99946
SHA512 f9dac7001475b489b3961524cbbd99870bd8f8279b44b0aed93cc66103822a70a13df44efaf620bb33037be1e9387103c2db18f7311343d6be4b255c705a40f2
SSDEEP 196608:XT66666666666666666666666666666666666666666666666666666666666666:X
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\parinupuleho liv-pafo.pdb

kernel32

GetThreadContext SearchPathW SetInformationJobObject FindFirstChangeNotificationW lstrlenA CopyFileExW InterlockedDecrement GetSystemWindowsDirectoryW GetProfileStringW SetConsoleScreenBufferSize FreeEnvironmentStringsA CreateNamedPipeW GetUserDefaultLangID GetCommandLineA FindResourceExA GetPrivateProfileIntA SetFileShortNameW LoadLibraryW FreeConsole GetSystemWow64DirectoryW InterlockedPopEntrySList HeapDestroy GetModuleFileNameW GetStartupInfoW GetCPInfoExW GetLastError SetLastError GetProcAddress IsBadHugeWritePtr SetStdHandle VirtualAllocEx LocalAlloc FindAtomA GetModuleFileNameA WTSGetActiveConsoleSessionId CreateIoCompletionPort HeapSetInformation GetCurrentDirectoryA OutputDebugStringA ReadConsoleInputW FindAtomW DeleteFileW GetSystemTime GetCommandLineW InterlockedIncrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer WriteFile GetStdHandle EnterCriticalSection LeaveCriticalSection RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW HeapValidate IsBadReadPtr HeapCreate SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeW LCMapStringW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent FlushFileBuffers ReadFile RaiseException CreateFileW CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

4c64a39b8cd718a94c4f8982a4f27fc3_JaffaCakes118

kernel32

generic