daa374c245a6a97a5f8c9f6dc178f6ea_JaffaCakes118

General

Target
daa374c245a6a97a5f8c9f6dc178f6ea_JaffaCakes118
Size 12.4MB
Sample240911-sqdlrayaje
SHA256 76354adc38ca087cde5e61c9249486df3d2d01939587740c0dbc836b97383ad7
MD5 daa374c245a6a97a5f8c9f6dc178f6ea
SHA1 641a53f516c870ceb2c078482aec3cea8eca0937
SHA512 d9bbfe065875bd4f21419a94e50b632c82142527713f7b2098fba0a62ae033e9fe704c9cc66dd03a002c39b3c8ccbceaca15533d2ce5ed44aaa4f9da1e26f3e6
SSDEEP 393216:9YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYn:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daa374c245a6a97a5f8c9f6dc178f6ea_JaffaCakes118

File Explorer

daa374c245a6a97a5f8c9f6dc178f6ea_JaffaCakes118

.exe 12.4MB

daa374c245a6a97a5f8c9f6dc178f6ea_JaffaCakes118

IMPHASH 7fd6de8b7ac14820eae90d7350ac48ac
SHA256 76354adc38ca087cde5e61c9249486df3d2d01939587740c0dbc836b97383ad7
MD5 daa374c245a6a97a5f8c9f6dc178f6ea
SHA1 641a53f516c870ceb2c078482aec3cea8eca0937
SHA512 d9bbfe065875bd4f21419a94e50b632c82142527713f7b2098fba0a62ae033e9fe704c9cc66dd03a002c39b3c8ccbceaca15533d2ce5ed44aaa4f9da1e26f3e6
SSDEEP 393216:9YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYn:
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

16355

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gifekizivil74-jiza teduteham\kice.pdb

kernel32

GlobalDeleteAtom GetLocaleInfoA HeapAlloc InterlockedDecrement GetEnvironmentStringsW GetUserDefaultLCID AddConsoleAliasW SetEvent GetCommandLineA ReadFileScatter LeaveCriticalSection GetFileAttributesA FindNextVolumeW WriteConsoleW CreateActCtxA GetDevicePowerState ReleaseSemaphore GetProcAddress VerLanguageNameA GetProcessId LocalAlloc CreateTapePartition RemoveDirectoryW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA FindFirstVolumeA EndUpdateResourceA GetCurrentProcessId FindNextVolumeA lstrcpyA InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapCreate VirtualFree VirtualAlloc HeapReAlloc GetModuleHandleW ExitProcess WriteFile GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoW WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

daa374c245a6a97a5f8c9f6dc178f6ea_JaffaCakes118

kernel32

generic