69fd4777f81223f73d34fb3acd5ab9d6_JaffaCakes118

General

Target
69fd4777f81223f73d34fb3acd5ab9d6_JaffaCakes118
Size 551KB
Sample240724-dcppjathll
SHA256 3184ee1f8b412648df77bf99b69d2d5661a29027058edc6baf5f6c859a5e6dae
MD5 69fd4777f81223f73d34fb3acd5ab9d6
SHA1 15ccc8ce9e292cb27e68ce5b4638565c011289ff
SHA512 cdc548c88d2711616303acc6686c551b84d27823b80ef41acbf2340c6f59f4f2090cad4979419e6402bb86f9548afbca583e014c9ecdbda8d46518b7e6529af3
SSDEEP 12288:FfQTMMKQMf7CL3KOJG5wnqVC6YyP+ZWq2Eyrf6L6qzxd6L:tQ4MKPf7EKOyY3yWFL6L
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69fd4777f81223f73d34fb3acd5ab9d6_JaffaCakes118

File Explorer

69fd4777f81223f73d34fb3acd5ab9d6_JaffaCakes118

.exe 551KB

69fd4777f81223f73d34fb3acd5ab9d6_JaffaCakes118

IMPHASH 706e8fca63a8542d96f465de65ea2573
SHA256 3184ee1f8b412648df77bf99b69d2d5661a29027058edc6baf5f6c859a5e6dae
MD5 69fd4777f81223f73d34fb3acd5ab9d6
SHA1 15ccc8ce9e292cb27e68ce5b4638565c011289ff
SHA512 cdc548c88d2711616303acc6686c551b84d27823b80ef41acbf2340c6f59f4f2090cad4979419e6402bb86f9548afbca583e014c9ecdbda8d46518b7e6529af3
SSDEEP 12288:FfQTMMKQMf7CL3KOJG5wnqVC6YyP+ZWq2Eyrf6L6qzxd6L:tQ4MKPf7EKOyY3yWFL6L
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8475

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\moledarinomuti\renepipam\livoliboy\geravu.pdb

kernel32

GetCommandLineW HeapReAlloc GlobalDeleteAtom GetLocaleInfoA EndUpdateResourceW InterlockedIncrement AddConsoleAliasW SetEvent GetSystemTimeAsFileTime GetEnvironmentStrings GlobalAlloc LeaveCriticalSection GetFileAttributesA HeapCreate WriteConsoleW CreateActCtxA lstrlenW FlushFileBuffers GetProcAddress RemoveDirectoryA VerLanguageNameW EnumResourceTypesW GetModuleFileNameA DebugSetProcessKillOnExit GetModuleHandleA EraseTape ReleaseMutex FindFirstVolumeW GetCurrentProcessId FindNextVolumeA lstrcpyW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection GetLastError HeapFree HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo VirtualFree VirtualAlloc GetModuleHandleW ExitProcess WriteFile GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetACP GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount HeapSize GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount LoadLibraryA CloseHandle CreateFileA SetStdHandle WriteConsoleA GetConsoleOutputCP SetEndOfFile GetProcessHeap ReadFile

Sharing

General

Malware Config

Signatures

File Explorer

69fd4777f81223f73d34fb3acd5ab9d6_JaffaCakes118

kernel32

generic