5a3cb616a41a0467d43cbcea95664a3e_JaffaCakes118

General

Target
5a3cb616a41a0467d43cbcea95664a3e_JaffaCakes118
Size 240KB
Sample240719-dpbnfatbla
SHA256 02463c270d6d5526e385d26993400525c815f89359ad4aa7d9c8c43586a60beb
MD5 5a3cb616a41a0467d43cbcea95664a3e
SHA1 30a390b2395dba5f0cbe0d114d14097fe752bc35
SHA512 055471784e9c996081909b20ad045b68f6a1288eefe875a9f00de71bed26cfa007fc10044ce8703439370ac16df9a23206054e772416838ba5ea6092e7a80f37
SSDEEP 3072:GR+pNEBNjzXa4xtPIQo10a4O7yPVMatdyoAAbtiSbVCV9ljBH8WP:GRymjzXTfIQoM9dy+hkV9l1c
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a3cb616a41a0467d43cbcea95664a3e_JaffaCakes118

File Explorer

5a3cb616a41a0467d43cbcea95664a3e_JaffaCakes118

.exe 240KB

5a3cb616a41a0467d43cbcea95664a3e_JaffaCakes118

IMPHASH 1f41e0ca4ea9e1d12338209135b5bab4
SHA256 02463c270d6d5526e385d26993400525c815f89359ad4aa7d9c8c43586a60beb
MD5 5a3cb616a41a0467d43cbcea95664a3e
SHA1 30a390b2395dba5f0cbe0d114d14097fe752bc35
SHA512 055471784e9c996081909b20ad045b68f6a1288eefe875a9f00de71bed26cfa007fc10044ce8703439370ac16df9a23206054e772416838ba5ea6092e7a80f37
SSDEEP 3072:GR+pNEBNjzXa4xtPIQo10a4O7yPVMatdyoAAbtiSbVCV9ljBH8WP:GRymjzXTfIQoM9dy+hkV9l1c
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jemonuvejotis\tiyujoy\kubo.pdb

kernel32

lstrlenA CopyFileExW FreeLibrary InterlockedIncrement GetQueuedCompletionStatus GetCommState GetProfileStringW CallNamedPipeW GetNumberFormatA FindResourceExA GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW GetVolumeInformationA LoadLibraryW GetSystemWow64DirectoryW GetSystemWindowsDirectoryA HeapDestroy GetBinaryTypeA GetCompressedFileSizeA CreateActCtxA GetStartupInfoW GetThreadContext SetThreadLocale GetStdHandle GetCPInfoExW GetLastError SetLastError GetProcAddress CreateNamedPipeA SearchPathA LoadLibraryA CreateSemaphoreW FindAtomA SetSystemTime GetModuleFileNameA FindNextFileA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation FreeEnvironmentStringsW GetCurrentDirectoryA TerminateJobObject FindAtomW UnregisterWaitEx DeleteFileA LCMapStringA GetCommandLineW CloseHandle CreateFileW InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW WriteFile QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr TlsAlloc TlsGetValue TlsSetValue TlsFree HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW OutputDebugStringA WriteConsoleW OutputDebugStringW IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode RaiseException SetStdHandle FlushFileBuffers

advapi32

AbortSystemShutdownA

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

5a3cb616a41a0467d43cbcea95664a3e_JaffaCakes118

kernel32

advapi32

winhttp

generic