e3b05fdf50cf2ba019181a935c1fdde5_JaffaCakes118

General

Target
e3b05fdf50cf2ba019181a935c1fdde5_JaffaCakes118
Size 12.6MB
Sample240916-a365qa1cpm
SHA256 16ad57aecbfa943ed105d550c94a348aa013c8dea6b3e9281b317d464d74d9f6
MD5 e3b05fdf50cf2ba019181a935c1fdde5
SHA1 8b5aaf25c9f5001089b7b60380e3173c5d98f8dc
SHA512 e5e3586be6916888237dfac294ab57c753212f270efd4f9c4c8206912fc953bcdcb21a2400797266e1e0ada4ae69bde0a1cdd274f9a52407edd077d123909e8b
SSDEEP 24576:iBYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYP:i
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e3b05fdf50cf2ba019181a935c1fdde5_JaffaCakes118

File Explorer

e3b05fdf50cf2ba019181a935c1fdde5_JaffaCakes118

.exe 12.6MB

e3b05fdf50cf2ba019181a935c1fdde5_JaffaCakes118

IMPHASH 062d438af0a5427d47d2119e831026d3
SHA256 16ad57aecbfa943ed105d550c94a348aa013c8dea6b3e9281b317d464d74d9f6
MD5 e3b05fdf50cf2ba019181a935c1fdde5
SHA1 8b5aaf25c9f5001089b7b60380e3173c5d98f8dc
SHA512 e5e3586be6916888237dfac294ab57c753212f270efd4f9c4c8206912fc953bcdcb21a2400797266e1e0ada4ae69bde0a1cdd274f9a52407edd077d123909e8b
SSDEEP 24576:iBYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYP:i
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7365

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yacoyiy20\vuxizetufimu.pdb

kernel32

InterlockedIncrement GetEnvironmentStringsW WaitForSingleObject SetEvent GetSystemTimeAsFileTime CancelDeviceWakeupRequest FindActCtxSectionStringA GetCommandLineA WriteFileGather EnumResourceTypesA GlobalAlloc SizeofResource SetConsoleCP LeaveCriticalSection GetFileAttributesW ReadFile GetProcAddress FreeUserPhysicalPages VerLanguageNameW PrepareTape GetProcessId RemoveDirectoryW GetModuleFileNameA GetModuleHandleA FindFirstVolumeA EndUpdateResourceA LocalSize AddConsoleAliasA LocalFree FindNextVolumeA lstrcpyW GetLocaleInfoA WriteConsoleW GetLastError HeapReAlloc HeapAlloc GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc GetModuleHandleW Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind FlushFileBuffers LoadLibraryA WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW HeapSize CreateFileA CloseHandle

user32

GetCursorPos

gdi32

GetCharWidthFloatW

advapi32

CloseEventLog

Sharing

General

Malware Config

Signatures

File Explorer

e3b05fdf50cf2ba019181a935c1fdde5_JaffaCakes118

kernel32

user32

gdi32

advapi32

generic