b61d1b63dc1e8bdcdf855c430ecfc16b_JaffaCakes118

General

Target
b61d1b63dc1e8bdcdf855c430ecfc16b_JaffaCakes118
Size 10.4MB
Sample240822-dkjs9avhjg
SHA256 0443e447b5af5dc9b28207adbf03126acfd49a70f6c3fd6b25b6c86e20bd2954
MD5 b61d1b63dc1e8bdcdf855c430ecfc16b
SHA1 e4685cb8db8de8f0f41573d5361f9a1b26eefc47
SHA512 df99fb67e282cddb74d0323ffc769045777d4c57ea77996393248d3579c45ba95ec80465ed2b214d9aad9099386789437fa38e25b4355fbbc813fc6a566b411f
SSDEEP 196608:UV6666666666666666666666666666666666666666666666666666666666666n:66666666666666666666666666666666
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b61d1b63dc1e8bdcdf855c430ecfc16b_JaffaCakes118

File Explorer

b61d1b63dc1e8bdcdf855c430ecfc16b_JaffaCakes118

.exe 10.4MB

b61d1b63dc1e8bdcdf855c430ecfc16b_JaffaCakes118

IMPHASH cff62fa5d60c26268b201fcb5b9dc813
SHA256 0443e447b5af5dc9b28207adbf03126acfd49a70f6c3fd6b25b6c86e20bd2954
MD5 b61d1b63dc1e8bdcdf855c430ecfc16b
SHA1 e4685cb8db8de8f0f41573d5361f9a1b26eefc47
SHA512 df99fb67e282cddb74d0323ffc769045777d4c57ea77996393248d3579c45ba95ec80465ed2b214d9aad9099386789437fa38e25b4355fbbc813fc6a566b411f
SSDEEP 196608:UV6666666666666666666666666666666666666666666666666666666666666n:66666666666666666666666666666666
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7413

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jahiyuvikiz\98\kazuxa\yijomax_hogehavatej96_nul.pdb

kernel32

EndUpdateResourceW InterlockedIncrement GetEnvironmentStringsW WaitForSingleObject SetEvent CancelDeviceWakeupRequest FindActCtxSectionStringA WriteFileGather EnumResourceTypesA GlobalAlloc SizeofResource SetConsoleCP LeaveCriticalSection GetFileAttributesW ReadFile GetProcAddress FreeUserPhysicalPages EnterCriticalSection VerLanguageNameW PrepareTape RemoveDirectoryW GetModuleFileNameA GetModuleHandleA FindFirstVolumeA LocalSize AddConsoleAliasA FindNextVolumeA GetSystemTime lstrcpyW GetLocaleInfoA WriteConsoleW GetCommandLineW HeapAlloc GetLastError HeapReAlloc GetCommandLineA GetStartupInfoA DeleteCriticalSection HeapFree VirtualFree VirtualAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle SetHandleCount GetFileType SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CloseHandle CreateFileA

user32

RealChildWindowFromPoint

gdi32

GetCharWidthFloatW

advapi32

DeregisterEventSource CloseEventLog

Sharing

General

Malware Config

Signatures

File Explorer

b61d1b63dc1e8bdcdf855c430ecfc16b_JaffaCakes118

kernel32

user32

gdi32

advapi32

generic