67208b1aa477b670f8f226bf6ece83a3_JaffaCakes118

General

Target
67208b1aa477b670f8f226bf6ece83a3_JaffaCakes118
Size 259KB
Sample240723-l2ff6a1bpj
SHA256 7cc0212804004b8a277959c122e92fac2d4762716466b4cd5cede18f0c80e7d2
MD5 67208b1aa477b670f8f226bf6ece83a3
SHA1 512d344794fec9fb04bbbb32342d4cec4d78d4e4
SHA512 cdb59ccf0fba5688f6f0f8b6eeba687092be9a62b7680fe8108c99e1fb31d6f9aa6afa5e7cffa57eb02c4c85aa93f72a80d085d66578e21e517b53c242cc518f
SSDEEP 6144:HKKoNYWis3uRB4wRkGaROhxxpeTr/ekI:VoOyuRB4oPzxp6L
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67208b1aa477b670f8f226bf6ece83a3_JaffaCakes118

File Explorer

67208b1aa477b670f8f226bf6ece83a3_JaffaCakes118

.exe 259KB

67208b1aa477b670f8f226bf6ece83a3_JaffaCakes118

IMPHASH 00e4a9909e1dd2f9b23ab751bea778c3
SHA256 7cc0212804004b8a277959c122e92fac2d4762716466b4cd5cede18f0c80e7d2
MD5 67208b1aa477b670f8f226bf6ece83a3
SHA1 512d344794fec9fb04bbbb32342d4cec4d78d4e4
SHA512 cdb59ccf0fba5688f6f0f8b6eeba687092be9a62b7680fe8108c99e1fb31d6f9aa6afa5e7cffa57eb02c4c85aa93f72a80d085d66578e21e517b53c242cc518f
SSDEEP 6144:HKKoNYWis3uRB4wRkGaROhxxpeTr/ekI:VoOyuRB4oPzxp6L
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

17881

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pezaxaja rurafucaxo.pdb

kernel32

GlobalDeleteAtom GetLocaleInfoA HeapAlloc EndUpdateResourceW InterlockedIncrement GetQueuedCompletionStatus ReadConsoleA GetCommandLineA CreateActCtxW GetEnvironmentStrings GlobalAlloc CopyFileW FreeConsole HeapCreate FindNextVolumeW GetFileAttributesW lstrlenW FlushFileBuffers DeactivateActCtx InterlockedExchange GetProcAddress BeginUpdateResourceW EnterCriticalSection ResetEvent WriteConsoleA RemoveDirectoryW SetConsoleWindowInfo GetTapeParameters SetEnvironmentVariableA GetModuleFileNameA SetConsoleTitleW GetModuleHandleA EraseTape VirtualProtect GetFileAttributesExW SetCalendarInfoA GetCurrentProcessId GetPrivateProfileSectionW FindNextVolumeA lstrcpyW CreateFileA WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc GetStartupInfoA GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW VirtualFree VirtualAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetFilePointer CloseHandle ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleCP GetConsoleMode LoadLibraryA GetLocaleInfoW GetConsoleOutputCP WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

67208b1aa477b670f8f226bf6ece83a3_JaffaCakes118

kernel32

generic