d32a352a771b6e0f4243cee3d46e30bd_JaffaCakes118

General

Target
d32a352a771b6e0f4243cee3d46e30bd_JaffaCakes118
Size 254KB
Sample240908-a2l36axapc
SHA256 e8d22ed359a17df94de5f41a4ec50d31c97cca7064951f069338abcc8bc248bf
MD5 d32a352a771b6e0f4243cee3d46e30bd
SHA1 f9e4be6804607542717cc1ec431ea13b9f49c62f
SHA512 01ffe10f4e1c9883ad01d766f1083a7329425ac1d416f650313355970d9dc04ba92f1cdefa1510e7ad9d7caba28ba97878a85d1a09036b2b5d5d08c126a3de0d
SSDEEP 6144:Ev8tRGQjyp5dhHOMn/kj0v54CuKFzkaYDwYU:E0rPjyp5bHvm0vO4FgaLY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d32a352a771b6e0f4243cee3d46e30bd_JaffaCakes118

File Explorer

d32a352a771b6e0f4243cee3d46e30bd_JaffaCakes118

.exe 254KB

d32a352a771b6e0f4243cee3d46e30bd_JaffaCakes118

IMPHASH 949cb2a875d86b476d185d15a2fa1cbb
SHA256 e8d22ed359a17df94de5f41a4ec50d31c97cca7064951f069338abcc8bc248bf
MD5 d32a352a771b6e0f4243cee3d46e30bd
SHA1 f9e4be6804607542717cc1ec431ea13b9f49c62f
SHA512 01ffe10f4e1c9883ad01d766f1083a7329425ac1d416f650313355970d9dc04ba92f1cdefa1510e7ad9d7caba28ba97878a85d1a09036b2b5d5d08c126a3de0d
SSDEEP 6144:Ev8tRGQjyp5dhHOMn/kj0v54CuKFzkaYDwYU:E0rPjyp5bHvm0vO4FgaLY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dume-mirodev\54-vobeba-texu\70\lazudo56\pojinur.pdb

kernel32

GetThreadContext SearchPathW SetInformationJobObject FindFirstChangeNotificationW lstrlenA CopyFileExW InterlockedDecrement GetSystemWindowsDirectoryW GetProfileStringW SetConsoleScreenBufferSize FreeEnvironmentStringsA CreateNamedPipeW GetUserDefaultLangID GetCommandLineA FindResourceExA GetPrivateProfileIntA SetFileShortNameW LoadLibraryW FreeConsole GetSystemWow64DirectoryW InterlockedPopEntrySList HeapDestroy GetModuleFileNameW GetStartupInfoW GetCPInfoExW GetLastError SetLastError GetProcAddress IsBadHugeWritePtr SetStdHandle VirtualAllocEx LocalAlloc FindAtomA GetModuleFileNameA WTSGetActiveConsoleSessionId CreateIoCompletionPort HeapSetInformation GetCurrentDirectoryA OutputDebugStringA ReadConsoleInputW FindAtomW DeleteFileW GetSystemTime GetCommandLineW InterlockedIncrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer WriteFile GetStdHandle EnterCriticalSection LeaveCriticalSection RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW HeapValidate IsBadReadPtr HeapCreate SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeW LCMapStringW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent FlushFileBuffers ReadFile RaiseException CreateFileW CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

d32a352a771b6e0f4243cee3d46e30bd_JaffaCakes118

kernel32

generic