5b3ddaac68b60729a22a257604222378_JaffaCakes118

General

Target
5b3ddaac68b60729a22a257604222378_JaffaCakes118
Size 14.6MB
Sample240719-ksvdaasdnn
SHA256 0626147a040801a50ca11aed6ad7a09a9d175b7ef2a1bd62bd32a3ca3fb71742
MD5 5b3ddaac68b60729a22a257604222378
SHA1 d2346b0cb65a4129b199389900f7c59edce73a9f
SHA512 2bea413af910ee151cf040c6bd06569b12216fe29ee7fda4de80344e68878684625b68fc1187eb9a13e100948f2efdf63df8955e1fa254f3a4f45da1f3499981
SSDEEP 12288:vj8IJUh3rNPQTN2/bMBrow6NGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGm:vDJqrFb0on
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b3ddaac68b60729a22a257604222378_JaffaCakes118

File Explorer

5b3ddaac68b60729a22a257604222378_JaffaCakes118

.exe 14.6MB

5b3ddaac68b60729a22a257604222378_JaffaCakes118

IMPHASH 3a5e62b58b4a57118c6dbb55f27570fc
SHA256 0626147a040801a50ca11aed6ad7a09a9d175b7ef2a1bd62bd32a3ca3fb71742
MD5 5b3ddaac68b60729a22a257604222378
SHA1 d2346b0cb65a4129b199389900f7c59edce73a9f
SHA512 2bea413af910ee151cf040c6bd06569b12216fe29ee7fda4de80344e68878684625b68fc1187eb9a13e100948f2efdf63df8955e1fa254f3a4f45da1f3499981
SSDEEP 12288:vj8IJUh3rNPQTN2/bMBrow6NGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGm:vDJqrFb0on
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6816

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fito19\cecos\wijivi\jijo\jedefak79\yujuho.pdb

kernel32

CopyFileExW CallNamedPipeA SetWaitableTimer InterlockedIncrement GetQueuedCompletionStatus GetCommState InterlockedDecrement UnlockFile SetEvent FreeEnvironmentStringsA CreateNamedPipeW GetNumberFormatA ReadConsoleOutputA GetCommandLineA SetProcessPriorityBoost GetSystemTimes GetPrivateProfileIntA GetSystemDirectoryW GetConsoleAliasExesLengthW HeapCreate TerminateProcess FileTimeToSystemTime GetModuleFileNameW lstrlenW WritePrivateProfileStringW GetPrivateProfileIntW InterlockedExchange GetStartupInfoA SetThreadContext FreeLibraryAndExitThread GetLastError GetThreadLocale GetProcAddress SetStdHandle EnterCriticalSection LoadLibraryA OpenMutexA CreateSemaphoreW LocalAlloc GetProfileStringA HeapWalk GlobalWire GetModuleHandleA FindFirstChangeNotificationA FreeEnvironmentStringsW FindNextFileW WriteProfileStringW GetCurrentDirectoryA SetFileShortNameA TlsAlloc FindAtomW EnumResourceLanguagesW DeleteFileW GetSystemTime LCMapStringW CopyFileExA GetVolumeInformationW GetCPInfoExW GetFileSize MoveFileA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter SetHandleCount GetStdHandle GetFileType GetCurrentProcess IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

advapi32

InitiateSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

5b3ddaac68b60729a22a257604222378_JaffaCakes118

kernel32

advapi32

generic