550b59b69ebfd6dda6b55725245b46ad_JaffaCakes118

General

Target
550b59b69ebfd6dda6b55725245b46ad_JaffaCakes118
Size 814KB
Sample240717-2a56hascqq
SHA256 0d977e55742460c71884d6040178fc8c7abf8c97136b6293da37cbf9c59b6778
MD5 550b59b69ebfd6dda6b55725245b46ad
SHA1 f6a71793288cc09397b262fba8fc38b29073a44e
SHA512 eced75d02b832bf68657835f1ef194ac39c04a806951f2d48f33ab5722804fdc0a8530507761c1dc0e2696d6dc8523a60541895e44eac3b886c288ccc4f21a45
SSDEEP 12288:KxrffFxEHP0VOTfvvQfDDkuM5glE15y4EXJUnrAtHbVzxp6L:K19xw0V6n4LLM5glE15HcJoABd36L
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
550b59b69ebfd6dda6b55725245b46ad_JaffaCakes118

File Explorer

550b59b69ebfd6dda6b55725245b46ad_JaffaCakes118

.exe 814KB

550b59b69ebfd6dda6b55725245b46ad_JaffaCakes118

IMPHASH d33805713bf84c5172011e6ee58dcc60
SHA256 0d977e55742460c71884d6040178fc8c7abf8c97136b6293da37cbf9c59b6778
MD5 550b59b69ebfd6dda6b55725245b46ad
SHA1 f6a71793288cc09397b262fba8fc38b29073a44e
SHA512 eced75d02b832bf68657835f1ef194ac39c04a806951f2d48f33ab5722804fdc0a8530507761c1dc0e2696d6dc8523a60541895e44eac3b886c288ccc4f21a45
SSDEEP 12288:KxrffFxEHP0VOTfvvQfDDkuM5glE15y4EXJUnrAtHbVzxp6L:K19xw0V6n4LLM5glE15HcJoABd36L
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

18099

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\lif-ved49-podacarofo-judisovuhola10.pdb

kernel32

HeapReAlloc GlobalDeleteAtom GetLocaleInfoA InterlockedIncrement GetQueuedCompletionStatus GetEnvironmentStringsW SetEvent ReadConsoleW GetCommandLineA CreateActCtxW GlobalAlloc CopyFileW FreeConsole LeaveCriticalSection GetFileAttributesA HeapCreate WriteConsoleW GetModuleFileNameW lstrlenW ReleaseSemaphore SetConsoleTitleA FlushFileBuffers DeactivateActCtx InterlockedExchange GetProcAddress BeginUpdateResourceW RemoveDirectoryA VerLanguageNameW LocalAlloc SetConsoleWindowInfo SetEnvironmentVariableA SetConsoleTitleW GetModuleHandleA EraseTape VirtualProtect EndUpdateResourceA FindFirstVolumeW GetCurrentProcessId GetPrivateProfileSectionW FindNextVolumeA lstrcpyW GetConsoleOutputCP WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection GetLastError HeapFree HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW VirtualFree VirtualAlloc GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetACP GetOEMCP IsValidCodePage FreeEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount LoadLibraryA CloseHandle CreateFileA SetStdHandle GetConsoleCP GetConsoleMode GetLocaleInfoW SetEndOfFile GetProcessHeap ReadFile WriteConsoleA

Sharing

General

Malware Config

Signatures

File Explorer

550b59b69ebfd6dda6b55725245b46ad_JaffaCakes118

kernel32

generic