7a7342222f97183ec5ccb6a70ff57f74_JaffaCakes118

General

Target
7a7342222f97183ec5ccb6a70ff57f74_JaffaCakes118
Size 11.4MB
Sample240730-3dvdvaygnc
SHA256 eabd0136260217d765ae216349093ae50a185532fce327fce9454d7d9a3ab0b4
MD5 7a7342222f97183ec5ccb6a70ff57f74
SHA1 82c4f25aca3367b175cdc6aa27d6c53e7817d9f5
SHA512 427e05be5451a915a8c36d42c50c616655575a04097b30c584af9cdaef4a95f4f98e59d1960f9f4ef94fe71e74a63b6adb2d806e613f481847ad0c97775f0353
SSDEEP 49152:/wAKFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFl:/w
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a7342222f97183ec5ccb6a70ff57f74_JaffaCakes118

File Explorer

7a7342222f97183ec5ccb6a70ff57f74_JaffaCakes118

.exe 11.4MB

7a7342222f97183ec5ccb6a70ff57f74_JaffaCakes118

IMPHASH 968069613992074265463fec272c56c9
SHA256 eabd0136260217d765ae216349093ae50a185532fce327fce9454d7d9a3ab0b4
MD5 7a7342222f97183ec5ccb6a70ff57f74
SHA1 82c4f25aca3367b175cdc6aa27d6c53e7817d9f5
SHA512 427e05be5451a915a8c36d42c50c616655575a04097b30c584af9cdaef4a95f4f98e59d1960f9f4ef94fe71e74a63b6adb2d806e613f481847ad0c97775f0353
SSDEEP 49152:/wAKFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFl:/w
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tavaligofew\koxujeyo94\vunolila.pdb

kernel32

GetCommandLineW GetThreadContext CopyFileExW TlsGetValue GetCommState InterlockedDecrement GetProfileStringW UnlockFile FreeEnvironmentStringsA GetConsoleAliasesLengthA GetNumberFormatA FindResourceExA GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW HeapDestroy CreateSemaphoreA GetBinaryTypeA GetModuleFileNameW GetSystemDirectoryA CreateActCtxA lstrlenW LCMapStringA GetPrivateProfileIntW GetStartupInfoA SetThreadLocale GetStdHandle GetCPInfoExW FreeLibraryAndExitThread GetLastError GetCurrentDirectoryW GetProcAddress CreateNamedPipeA EnterCriticalSection LoadLibraryA OpenMutexA WritePrivateProfileStringA SetThreadIdealProcessor HeapWalk SetSystemTime GlobalWire FindNextFileA CreateIoCompletionPort GetModuleHandleA FindFirstChangeNotificationA WriteProfileStringW SetFileShortNameA FindAtomW EnumResourceLanguagesW UnregisterWaitEx GetSystemTime DeleteFileA GetVolumeInformationW LocalFileTimeToFileTime EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW HeapValidate IsBadReadPtr InterlockedIncrement GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsSetValue TlsFree SetLastError HeapCreate WriteFile HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW SetStdHandle FlushFileBuffers CreateFileW CloseHandle RaiseException

Sharing

General

Malware Config

Signatures

File Explorer

7a7342222f97183ec5ccb6a70ff57f74_JaffaCakes118

kernel32

generic