c18bb625859c7e26ae798cb679938edb_JaffaCakes118

General

Target
c18bb625859c7e26ae798cb679938edb_JaffaCakes118
Size 513KB
Sample240825-zj3evswamn
SHA256 a1fbf4c01b9cbd00eb95d3080423c2e2ce57c1025beb520b482b258b84b0e8db
MD5 c18bb625859c7e26ae798cb679938edb
SHA1 0f42269c66bc39def5b6953600fa2666da588aca
SHA512 64cd271d23e32de62dd3b388a5e53480ab47218808808df66dbf181f9854a33503bd239c30ade21418cb41d5608a18c991652249c1aa7f82b02f2e4802069e57
SSDEEP 12288:5o6dW0obl7zxBloV9bQRmOOCpZIqoXBNDowqLQ:ZTodHAKmOppZIz0LQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c18bb625859c7e26ae798cb679938edb_JaffaCakes118

File Explorer

c18bb625859c7e26ae798cb679938edb_JaffaCakes118

.exe 513KB

c18bb625859c7e26ae798cb679938edb_JaffaCakes118

IMPHASH 56224a64339684be7c7ed8cfa70e9258
SHA256 a1fbf4c01b9cbd00eb95d3080423c2e2ce57c1025beb520b482b258b84b0e8db
MD5 c18bb625859c7e26ae798cb679938edb
SHA1 0f42269c66bc39def5b6953600fa2666da588aca
SHA512 64cd271d23e32de62dd3b388a5e53480ab47218808808df66dbf181f9854a33503bd239c30ade21418cb41d5608a18c991652249c1aa7f82b02f2e4802069e57
SSDEEP 12288:5o6dW0obl7zxBloV9bQRmOOCpZIqoXBNDowqLQ:ZTodHAKmOppZIz0LQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\ferijacorono\xezicufucufite93\kugecapoy\zid\bimefeguzela_peg.pdb

kernel32

GetCommandLineW GetThreadContext lstrlenA InterlockedIncrement GetQueuedCompletionStatus GetCommState GetSystemWindowsDirectoryW GetProfileStringW SetConsoleScreenBufferSize CallNamedPipeW FreeEnvironmentStringsA SetTapeParameters CreateNamedPipeW GetCompressedFileSizeW CreateActCtxW FindResourceExA GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetSystemWow64DirectoryW HeapDestroy CreateSemaphoreA GetBinaryTypeA QueryInformationJobObject GetStartupInfoW LCMapStringA GetPrivateProfileIntW GetLastError SetLastError GetProcAddress SetStdHandle SearchPathA LocalAlloc GetNumberFormatW FindAtomA GetModuleFileNameA FindNextFileA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation GetCurrentDirectoryA OutputDebugStringA GetCPInfoExA FindAtomW DeleteFileW GetSystemTime CopyFileExA InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW WriteFile GetStdHandle EnterCriticalSection LeaveCriticalSection RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW HeapValidate IsBadReadPtr HeapCreate SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeW LCMapStringW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent FlushFileBuffers ReadFile RaiseException CreateFileW CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

c18bb625859c7e26ae798cb679938edb_JaffaCakes118

kernel32

generic