5528e7e101d85070f7b66599a5bad3d7_JaffaCakes118

General

Target
5528e7e101d85070f7b66599a5bad3d7_JaffaCakes118
Size 238KB
Sample240717-2wz7datcln
SHA256 6c609ff285084f5135ab2eff3ace294654ef150aaab42c3a96ab6278b5b1fc30
MD5 5528e7e101d85070f7b66599a5bad3d7
SHA1 f13133de64ee6f9b59e927dbde757c98da9ce058
SHA512 ef6979f90290f48a84f8b3b56e11a6dd7ea0dd56ad23bd71510ed442ec2e63a4d0f02379659637bb0ed5235805d32a0454df86f69b3175f68620412e05e35d09
SSDEEP 6144:+4Q6qW6nXeV7r7Ok53YOO2ex9pnh1AX4z:+5WYXeV7z53YOsx9FGC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5528e7e101d85070f7b66599a5bad3d7_JaffaCakes118

File Explorer

5528e7e101d85070f7b66599a5bad3d7_JaffaCakes118

.exe 238KB

5528e7e101d85070f7b66599a5bad3d7_JaffaCakes118

IMPHASH bec5279be0cb3c653f5b0b143b00a99c
SHA256 6c609ff285084f5135ab2eff3ace294654ef150aaab42c3a96ab6278b5b1fc30
MD5 5528e7e101d85070f7b66599a5bad3d7
SHA1 f13133de64ee6f9b59e927dbde757c98da9ce058
SHA512 ef6979f90290f48a84f8b3b56e11a6dd7ea0dd56ad23bd71510ed442ec2e63a4d0f02379659637bb0ed5235805d32a0454df86f69b3175f68620412e05e35d09
SSDEEP 6144:+4Q6qW6nXeV7r7Ok53YOO2ex9pnh1AX4z:+5WYXeV7z53YOsx9FGC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\donufominu\was\nawucexoyofa\kisuxukohu\kozasoriyu-fuwik.pdb

kernel32

GetThreadContext SetInformationJobObject lstrlenA FindResourceExW InterlockedDecrement GetSystemWindowsDirectoryW FreeEnvironmentStringsA OutputDebugStringW CreateNamedPipeW GetPrivateProfileStringW GetUserDefaultLangID GetCommandLineA GlobalAlloc SetFileShortNameW LoadLibraryW FreeConsole GetSystemWow64DirectoryW InterlockedPopEntrySList HeapDestroy SetConsoleCursorPosition GetModuleFileNameW GetOverlappedResult GetStartupInfoA GetCPInfoExW OpenMutexW GetLastError SetLastError GetProcAddress CreateNamedPipeA MoveFileW SetStdHandle SearchPathA VirtualAllocEx GetProfileStringA PostQueuedCompletionStatus FindAtomA SetSystemTime GetModuleFileNameA WriteProfileStringA WTSGetActiveConsoleSessionId HeapSetInformation GetCurrentDirectoryA ReadConsoleInputW DeleteFileW CloseHandle CreateFileW WideCharToMultiByte GetCommandLineW GetStartupInfoW DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer InterlockedIncrement GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW RtlUnwind HeapValidate IsBadReadPtr QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate WriteFile IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection OutputDebugStringA WriteConsoleW LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RaiseException FlushFileBuffers

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

5528e7e101d85070f7b66599a5bad3d7_JaffaCakes118

kernel32

winhttp

generic