d2634db544c20d97b6421a590aeb8aab_JaffaCakes118

General

Target
d2634db544c20d97b6421a590aeb8aab_JaffaCakes118
Size 153KB
Sample240907-t8zglstdmj
SHA256 e4cc0daa97d719ca7faddfebae937afb3363d5044be0fdbcba02af9dbc14ec37
MD5 d2634db544c20d97b6421a590aeb8aab
SHA1 aabd15b8476e5dd91e2911cff2250d864a46e361
SHA512 1190c9a3a6f494a015cfccac31adbd8ef8173777beb0b48197d89356429d218989fa1d6bdad21147007fe181d4a6d7153bb510c7895fdcdb595a8f5f3b412bf6
SSDEEP 3072:Z0XlnGo3PCz2cb1Lcgv6+BRUHlDCYSojn0TguKYQ8urvbTUhd2Yd9GEpPv9mHc:ZAnf3PCz2cb1Lz6aI0YSoj0TZKYNgjoB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bin_2020-08-17_09-19.exe

File Explorer

d2634db544c20d97b6421a590aeb8aab_JaffaCakes118

.gz 153KB
bin_2020-08-17_09-19.exe

.exe 222KB

d2634db544c20d97b6421a590aeb8aab_JaffaCakes118

SHA256 e4cc0daa97d719ca7faddfebae937afb3363d5044be0fdbcba02af9dbc14ec37
MD5 d2634db544c20d97b6421a590aeb8aab
SHA1 aabd15b8476e5dd91e2911cff2250d864a46e361
SHA512 1190c9a3a6f494a015cfccac31adbd8ef8173777beb0b48197d89356429d218989fa1d6bdad21147007fe181d4a6d7153bb510c7895fdcdb595a8f5f3b412bf6
SSDEEP 3072:Z0XlnGo3PCz2cb1Lcgv6+BRUHlDCYSojn0TguKYQ8urvbTUhd2Yd9GEpPv9mHc:ZAnf3PCz2cb1Lz6aI0YSoj0TZKYNgjoB
MD5 SHA1 SHA512 SSDEEP

bin_2020-08-17_09-19.exe

IMPHASH dc4551fb9297835a99728f16261d08a6
SHA256 3cc4cb75641d291b4ea472ae93239c0d11aa00ff6d30d867c04f5d8215fd981c
MD5 483740a87cee3f180bbb1c49b8b3ef7a
SHA1 4e5e397353c9e75e8c21495db52ffed085c4eac8
SHA512 3c5506c17211c4d74495af4e99938e1ea2d0c0b9fda4c9b9e1d21917c7b20a7c96e99619b10636278e808593724eb84b6ed619fbdec1d0c3aa96d3bbbf6d6df6
SSDEEP 3072:BG2yArbgQDLjyKYoyZyxD+YSojl0vguKYQourvnUXviFezORL5VBH50VpG:QyvBjvYoiYSojyvZKYfgfl+615cG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14310

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\viwinoce_yogobobobebodo4-gaxu\vicojufoz.pdb

kernel32

FindNextVolumeMountPointA FormatMessageA GetUserGeoID GetCurrencyFormatW ReplaceFileW ReadFile lstrlenW IsBadStringPtrA SetConsoleTitleA GetTempPathW GetTapeStatus CreateHardLinkA OpenWaitableTimerA LoadLibraryA GetProcessWorkingSetSize LocalAlloc WritePrivateProfileStringA GetProcessAffinityMask VirtualProtect GlobalAddAtomW OpenFileMappingA LCMapStringW SetComputerNameW GetUserDefaultLCID DebugActiveProcessStop GlobalFree GetCommandLineW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapAlloc HeapCreate VirtualFree VirtualAlloc HeapReAlloc GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetModuleHandleA GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle CreateFileA

user32

GetCursor

Sharing

General

Malware Config

Signatures

File Explorer

d2634db544c20d97b6421a590aeb8aab_JaffaCakes118

bin_2020-08-17_09-19.exe

kernel32

user32

generic