a255a692bdcae3b876b7b8d7cfc1cd64_JaffaCakes118

General

Target
a255a692bdcae3b876b7b8d7cfc1cd64_JaffaCakes118
Size 403KB
Sample240817-ngjdeswbnl
SHA256 0b47269dbe8ac66c68ac012fe7ab77cd7acc60a4f8ec4318ac0be707171211ce
MD5 a255a692bdcae3b876b7b8d7cfc1cd64
SHA1 3acaaec24bfb12a97207cb9d5f6a729261682f93
SHA512 20220e3bc56593b1aa35dbd30b8df4e1c9910b53af86f0db31ddf46a1fc3558c8edf9c485fa5bfc15d27e0485d246daf549f5c785c564c265509d3e808419d16
SSDEEP 6144:q45eUW6n/pZ3z7O/nzlLFo2/fVUQ0KZIBtJu9qC:qgUY/pZ30nzdFL/GBKZIPQR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a255a692bdcae3b876b7b8d7cfc1cd64_JaffaCakes118

File Explorer

a255a692bdcae3b876b7b8d7cfc1cd64_JaffaCakes118

.exe 403KB

a255a692bdcae3b876b7b8d7cfc1cd64_JaffaCakes118

IMPHASH bec5279be0cb3c653f5b0b143b00a99c
SHA256 0b47269dbe8ac66c68ac012fe7ab77cd7acc60a4f8ec4318ac0be707171211ce
MD5 a255a692bdcae3b876b7b8d7cfc1cd64
SHA1 3acaaec24bfb12a97207cb9d5f6a729261682f93
SHA512 20220e3bc56593b1aa35dbd30b8df4e1c9910b53af86f0db31ddf46a1fc3558c8edf9c485fa5bfc15d27e0485d246daf549f5c785c564c265509d3e808419d16
SSDEEP 6144:q45eUW6n/pZ3z7O/nzlLFo2/fVUQ0KZIBtJu9qC:qgUY/pZ30nzdFL/GBKZIPQR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vehun82\dizonocu\vuyuzum64\dav.pdb

kernel32

GetThreadContext SetInformationJobObject lstrlenA FindResourceExW InterlockedDecrement GetSystemWindowsDirectoryW FreeEnvironmentStringsA OutputDebugStringW CreateNamedPipeW GetPrivateProfileStringW GetUserDefaultLangID GetCommandLineA GlobalAlloc SetFileShortNameW LoadLibraryW FreeConsole GetSystemWow64DirectoryW InterlockedPopEntrySList HeapDestroy SetConsoleCursorPosition GetModuleFileNameW GetOverlappedResult GetStartupInfoA GetCPInfoExW OpenMutexW GetLastError SetLastError GetProcAddress CreateNamedPipeA MoveFileW SetStdHandle SearchPathA VirtualAllocEx GetProfileStringA PostQueuedCompletionStatus FindAtomA SetSystemTime GetModuleFileNameA WriteProfileStringA WTSGetActiveConsoleSessionId HeapSetInformation GetCurrentDirectoryA ReadConsoleInputW DeleteFileW CloseHandle CreateFileW WideCharToMultiByte GetCommandLineW GetStartupInfoW DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer InterlockedIncrement GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW RtlUnwind HeapValidate IsBadReadPtr QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate WriteFile IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection OutputDebugStringA WriteConsoleW LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RaiseException FlushFileBuffers

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

a255a692bdcae3b876b7b8d7cfc1cd64_JaffaCakes118

kernel32

winhttp

generic