d8fee716b4673dbe2860a3cefb3ccf03_JaffaCakes118

General

Target
d8fee716b4673dbe2860a3cefb3ccf03_JaffaCakes118
Size 11.5MB
Sample240910-zaacqavfqa
SHA256 aab32afff9386da5026e13907bc9b3449ca79216b3bdf027a4f54a399dde7576
MD5 d8fee716b4673dbe2860a3cefb3ccf03
SHA1 1649c17a2b4c0d816aeba0b6759afa73b7b4a6d9
SHA512 c8d20e8b80ea466e7ebf3a4b8303f27d9566bacd3614f6b36bca683dc5e54d5aca97aa66897bb70f50072f5d97de27c4702d57764d344399f1bee5e3ba6359b9
SSDEEP 3072:/oiqjV0QCeV75zMwb2EfDXTBrt0c5f+Z7ApWt+0krytpObPUfAGM4H1M4CjiJNx4:/oiqjWHeV9zthDjBrmA+VkDbSAgQiTx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d8fee716b4673dbe2860a3cefb3ccf03_JaffaCakes118

File Explorer

d8fee716b4673dbe2860a3cefb3ccf03_JaffaCakes118

.exe 11.5MB

d8fee716b4673dbe2860a3cefb3ccf03_JaffaCakes118

IMPHASH 98e53b2cb31fce4d393c9de9e623875b
SHA256 aab32afff9386da5026e13907bc9b3449ca79216b3bdf027a4f54a399dde7576
MD5 d8fee716b4673dbe2860a3cefb3ccf03
SHA1 1649c17a2b4c0d816aeba0b6759afa73b7b4a6d9
SHA512 c8d20e8b80ea466e7ebf3a4b8303f27d9566bacd3614f6b36bca683dc5e54d5aca97aa66897bb70f50072f5d97de27c4702d57764d344399f1bee5e3ba6359b9
SSDEEP 3072:/oiqjV0QCeV75zMwb2EfDXTBrt0c5f+Z7ApWt+0krytpObPUfAGM4H1M4CjiJNx4:/oiqjWHeV9zthDjBrmA+VkDbSAgQiTx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\galizakowatof\91_sehohezube\hoxaruna.pdb

kernel32

GetThreadContext SetInformationJobObject lstrlenA FindResourceExW InterlockedDecrement GetSystemWindowsDirectoryW SetConsoleScreenBufferSize FreeEnvironmentStringsA OutputDebugStringW CreateNamedPipeW GetUserDefaultLangID GetCommandLineA SetFileShortNameW LoadLibraryW FreeConsole GetSystemWow64DirectoryW InterlockedPopEntrySList HeapDestroy GetModuleFileNameW GetStartupInfoA GetCPInfoExW OpenMutexW GetLastError SetLastError GetProcAddress MoveFileW SetStdHandle SearchPathA VirtualAllocEx GetPrivateProfileStringA LocalAlloc GetProfileStringA SetSystemTime GetModuleFileNameA WriteProfileStringA WTSGetActiveConsoleSessionId CreateIoCompletionPort HeapSetInformation GetCurrentDirectoryA ReadConsoleInputW FindAtomW DeleteFileW CloseHandle CreateFileW WideCharToMultiByte GetCommandLineW GetStartupInfoW DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer InterlockedIncrement GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW HeapValidate IsBadReadPtr RtlUnwind QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate WriteFile IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection OutputDebugStringA WriteConsoleW LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RaiseException FlushFileBuffers

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

d8fee716b4673dbe2860a3cefb3ccf03_JaffaCakes118

kernel32

winhttp

generic