a696a05e6c1632ede1c088bc58246036_JaffaCakes118

General

Target
a696a05e6c1632ede1c088bc58246036_JaffaCakes118
Size 11.6MB
Sample240818-ng7e9a1fkh
SHA256 f6b4b4a24b69fc750012d93068cfe4ac74b720bcb010d4df213b9e953890380d
MD5 a696a05e6c1632ede1c088bc58246036
SHA1 7decb949c9d6bb81d5a9fb961111c1ddc9c1d658
SHA512 1b21477b67e42bdfe40a8a2b6df83764ba1643f745b58f02c6d417e7e91c117afe9cbbb98c6551ac2508d20080712c101ed7efd54e8bb2ab647d128b35704be8
SSDEEP 3072:nHZQIswULGiBqwZyNvXT/u22H/PaAf209fB7epgDnESzN57I6ZibkFah/NleJm/F:nHZQItUDBJiPT/u22H3s0DhcHU4l
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a696a05e6c1632ede1c088bc58246036_JaffaCakes118

File Explorer

a696a05e6c1632ede1c088bc58246036_JaffaCakes118

.exe 11.6MB

a696a05e6c1632ede1c088bc58246036_JaffaCakes118

IMPHASH 42558e76cb0191e50d5255e5f863e8b9
SHA256 f6b4b4a24b69fc750012d93068cfe4ac74b720bcb010d4df213b9e953890380d
MD5 a696a05e6c1632ede1c088bc58246036
SHA1 7decb949c9d6bb81d5a9fb961111c1ddc9c1d658
SHA512 1b21477b67e42bdfe40a8a2b6df83764ba1643f745b58f02c6d417e7e91c117afe9cbbb98c6551ac2508d20080712c101ed7efd54e8bb2ab647d128b35704be8
SSDEEP 3072:nHZQIswULGiBqwZyNvXT/u22H/PaAf209fB7epgDnESzN57I6ZibkFah/NleJm/F:nHZQItUDBJiPT/u22H3s0DhcHU4l
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kicomonitotiyo_jin\bekawutof\vim\zomicapisejesu\36-n.pdb

kernel32

GetCommandLineW GetThreadContext UnregisterWait DosDateTimeToFileTime FindFirstChangeNotificationW CopyFileExW CallNamedPipeA HeapAlloc SetWaitableTimer InterlockedIncrement InterlockedDecrement GetProfileStringW FreeEnvironmentStringsA CreateNamedPipeW LocalFlags SetCommState SetProcessPriorityBoost GetSystemTimes ActivateActCtx GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW GetVolumeInformationA LoadLibraryW TerminateThread LeaveCriticalSection VerifyVersionInfoA FileTimeToSystemTime IsDBCSLeadByte GetCompressedFileSizeA lstrlenW LCMapStringA InterlockedExchange GetStartupInfoA SetThreadLocale GetCPInfoExW GetLastError GetCurrentDirectoryW SetLastError GetProcAddress SetStdHandle DisableThreadLibraryCalls LoadLibraryA WritePrivateProfileStringA FindAtomA GetModuleFileNameA GetThreadPriority CreateIoCompletionPort GetModuleHandleA HeapSetInformation FindNextFileW WriteProfileStringW GetCurrentThreadId TlsAlloc LocalSize EnumResourceLanguagesW SetFileValidData GetSystemTime GetProfileSectionW GetStartupInfoW HeapValidate IsBadReadPtr RaiseException EnterCriticalSection GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode GetModuleHandleW Sleep ExitProcess TlsGetValue TlsSetValue TlsFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetFilePointer GetStringTypeA GetStringTypeW GetLocaleInfoA DebugBreak OutputDebugStringA OutputDebugStringW LCMapStringW CreateFileA CloseHandle FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

a696a05e6c1632ede1c088bc58246036_JaffaCakes118

kernel32

generic