9529373105174adc561ae1e09488e8a6_JaffaCakes118

General

Target
9529373105174adc561ae1e09488e8a6_JaffaCakes118
Size 10.9MB
Sample240814-jcv47szelc
SHA256 baaf5d81ae65db81c169c4da786d971683a1bafb848662d0202d80b0d0266d0c
MD5 9529373105174adc561ae1e09488e8a6
SHA1 37d8a3f5cacc07f043212479e5a116010e455b17
SHA512 5fab1a29fc6f6cdc13c5eba140d0b6b76efe895358aeb550aced11b2609905899ed4926a9ab02b315c5cd1b108b99640782d57a8a5108f021d032fa0128fea2a
SSDEEP 196608:Xsvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv:X
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9529373105174adc561ae1e09488e8a6_JaffaCakes118

File Explorer

9529373105174adc561ae1e09488e8a6_JaffaCakes118

.exe 10.9MB

9529373105174adc561ae1e09488e8a6_JaffaCakes118

IMPHASH 2acca7007d519418a75fa59166363dda
SHA256 baaf5d81ae65db81c169c4da786d971683a1bafb848662d0202d80b0d0266d0c
MD5 9529373105174adc561ae1e09488e8a6
SHA1 37d8a3f5cacc07f043212479e5a116010e455b17
SHA512 5fab1a29fc6f6cdc13c5eba140d0b6b76efe895358aeb550aced11b2609905899ed4926a9ab02b315c5cd1b108b99640782d57a8a5108f021d032fa0128fea2a
SSDEEP 196608:Xsvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv:X
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nul\hu.pdb

kernel32

GetCommandLineW GetThreadContext SetInformationJobObject FindFirstChangeNotificationW lstrlenA InterlockedIncrement GetQueuedCompletionStatus GetSystemWindowsDirectoryW GetProfileStringW SetConsoleScreenBufferSize CallNamedPipeW FreeEnvironmentStringsA SetTapeParameters CreateNamedPipeW GetCompressedFileSizeW SetCommState CreateActCtxW FindResourceExA SetFileShortNameW LoadLibraryW SizeofResource GetSystemWow64DirectoryW HeapDestroy CreateSemaphoreA GetBinaryTypeA GetModuleFileNameW GetSystemDirectoryA GetStartupInfoW LCMapStringA GetPrivateProfileIntW GetLastError SetLastError GetProcAddress SetStdHandle SearchPathA LocalAlloc GetNumberFormatW FindAtomA FindNextFileA CreateIoCompletionPort HeapSetInformation GetCurrentDirectoryA OutputDebugStringA GetCPInfoExA FindAtomW DeleteFileW GetSystemTime CopyFileExA InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer WriteFile GetStdHandle EnterCriticalSection LeaveCriticalSection RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW HeapValidate IsBadReadPtr HeapCreate SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeW LCMapStringW HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent FlushFileBuffers ReadFile RaiseException CreateFileW CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

9529373105174adc561ae1e09488e8a6_JaffaCakes118

kernel32

generic