c8e116a5ef1b4ccca2114e8731f006d6_JaffaCakes118

General

Target
c8e116a5ef1b4ccca2114e8731f006d6_JaffaCakes118
Size 5.0MB
Sample240829-qeptjaverj
SHA256 92d77c1389c4d81bca7ede850a006433345c79a1b507893e8b22b118182bed6f
MD5 c8e116a5ef1b4ccca2114e8731f006d6
SHA1 d3d8a7c603ce30821db8eed6745d92aefd7db98b
SHA512 05d0ce58b184781aed85714871c1e7692afe5223487d939d70a220a94ed815f781df90f43f1b65734ab6d6c064f3d5574d5971340cb905b05bb515c7e7d7d48c
SSDEEP 98304:K2GB/PqCiPb+Im2nQurIiABmuorm33vq+Ly9PrBkMdJ9q:2qCiyIm2nXvA8m3f3y9zBkMD9q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8e116a5ef1b4ccca2114e8731f006d6_JaffaCakes118

File Explorer

c8e116a5ef1b4ccca2114e8731f006d6_JaffaCakes118

.exe 5.0MB

c8e116a5ef1b4ccca2114e8731f006d6_JaffaCakes118

IMPHASH 94704a7d9ba53f5664a9af09201e7e6e
SHA256 92d77c1389c4d81bca7ede850a006433345c79a1b507893e8b22b118182bed6f
MD5 c8e116a5ef1b4ccca2114e8731f006d6
SHA1 d3d8a7c603ce30821db8eed6745d92aefd7db98b
SHA512 05d0ce58b184781aed85714871c1e7692afe5223487d939d70a220a94ed815f781df90f43f1b65734ab6d6c064f3d5574d5971340cb905b05bb515c7e7d7d48c
SSDEEP 98304:K2GB/PqCiPb+Im2nQurIiABmuorm33vq+Ly9PrBkMdJ9q:2qCiyIm2nXvA8m3f3y9zBkMD9q
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

34052

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\bexih yuwaliz.pdb

kernel32

GetCommConfig IsBadReadPtr GetPrivateProfileStringW FormatMessageA SetFileTime EnumTimeFormatsA GetCommandLineA InitializeCriticalSection LoadLibraryW IsValidLocale GetCalendarInfoA DeleteVolumeMountPointW WritePrivateProfileStructW GetTapePosition GetFileAttributesW GetAtomNameW GetCompressedFileSizeA GetTimeZoneInformation GetConsoleOutputCP FindFirstFileA GetLastError InterlockedFlushSList GetCurrentDirectoryW GetLongPathNameW BindIoCompletionCallback GetThreadLocale HeapSize HeapUnlock GetFirmwareEnvironmentVariableW MoveFileWithProgressA SetTimerQueueTimer DefineDosDeviceA OpenMutexA CreateSemaphoreW LocalAlloc GetExitCodeThread AddAtomA OpenJobObjectW GetThreadPriority WaitCommEvent GetModuleHandleA GetProcessShutdownParameters CancelTimerQueueTimer FreeEnvironmentStringsW VirtualProtect OpenEventW GetShortPathNameW CloseHandle FindNextVolumeA lstrcpyA CreateFileW FlushFileBuffers WriteConsoleW SetStdHandle SetFilePointerEx GetConsoleMode GetConsoleCP OutputDebugStringW GetSystemDefaultLCID SleepEx SetComputerNameW UpdateResourceA GetVolumeNameForVolumeMountPointA SetEndOfFile IsBadHugeReadPtr GetDriveTypeW GetConsoleAliasExesA TlsGetValue lstrlenA WriteConsoleOutputCharacterW CreateTimerQueue GetFullPathNameA LockFileEx EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar GetStringTypeW HeapFree RaiseException RtlUnwind HeapAlloc GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW GetUserDefaultLCID EnumSystemLocalesW IsDebuggerPresent GetProcessHeap ExitProcess GetModuleHandleExW GetCurrentThreadId GetStdHandle GetFileType GetModuleFileNameA WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetACP IsValidCodePage GetOEMCP HeapReAlloc LoadLibraryExW

user32

InvalidateRgn GetMonitorInfoA DrawStateW GetMenuStringA EnumDisplayDevicesA MapVirtualKeyW

advapi32

RegQueryValueExW AccessCheckByTypeResultListAndAuditAlarmW ConvertToAutoInheritPrivateObjectSecurity RegisterServiceCtrlHandlerW QueryServiceConfigA RegSaveKeyA RegConnectRegistryW RegOpenKeyExA GetOldestEventLogRecord ObjectDeleteAuditAlarmW RegQueryValueExA SetPrivateObjectSecurityEx EnumServicesStatusA InitiateSystemShutdownA CreateServiceW

Sharing

General

Malware Config

Signatures

File Explorer

c8e116a5ef1b4ccca2114e8731f006d6_JaffaCakes118

kernel32

user32

advapi32

generic