f4950d0ab093fcb3cedd0b4333e55c27_JaffaCakes118

General

Target
f4950d0ab093fcb3cedd0b4333e55c27_JaffaCakes118
Size 510KB
Sample240924-1vyfqa1cjf
SHA256 25a718d24e04f5b7bfce0ceb2c073b5d5fdd1809d448ffc8f4fa0a2a9d9190ad
MD5 f4950d0ab093fcb3cedd0b4333e55c27
SHA1 0093fe7d895d942d5f6486cdc0d0b7c413e497f7
SHA512 1fff63cd372a020774fc7bac1aa960b3ac27fe30ea846a77f5ee5f198120738ac21a4bc58c35ca7c9f8dc37a8fe0c7616291ead399c882f4755ed08079f88f65
SSDEEP 12288:5joVTBdpkrjaXa18aubb+9xb/hKhFmwSflOPn:yvv0GZaU+DhKhFmfO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4950d0ab093fcb3cedd0b4333e55c27_JaffaCakes118

File Explorer

f4950d0ab093fcb3cedd0b4333e55c27_JaffaCakes118

.exe 510KB

f4950d0ab093fcb3cedd0b4333e55c27_JaffaCakes118

IMPHASH 65623ad6588654efc5ff89fc5975e592
SHA256 25a718d24e04f5b7bfce0ceb2c073b5d5fdd1809d448ffc8f4fa0a2a9d9190ad
MD5 f4950d0ab093fcb3cedd0b4333e55c27
SHA1 0093fe7d895d942d5f6486cdc0d0b7c413e497f7
SHA512 1fff63cd372a020774fc7bac1aa960b3ac27fe30ea846a77f5ee5f198120738ac21a4bc58c35ca7c9f8dc37a8fe0c7616291ead399c882f4755ed08079f88f65
SSDEEP 12288:5joVTBdpkrjaXa18aubb+9xb/hKhFmwSflOPn:yvv0GZaU+DhKhFmfO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

18240

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess FindResourceA HeapAlloc GetCurrentProcess GetModuleHandleExW GetTimeFormatA GetTickCount GetConsoleAliasesA ActivateActCtx GlobalAlloc GetLocaleInfoW SizeofResource GetFileAttributesA FindNextVolumeMountPointW CreateJobObjectA GetProcAddress HeapSize GetConsoleDisplayMode FreeUserPhysicalPages GetAtomNameA SetConsoleCtrlHandler GetModuleHandleA LoadLibraryExA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetStartupInfoW HeapValidate IsBadReadPtr RaiseException RtlUnwind TlsGetValue GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError GetLastError DebugBreak GetStdHandle WriteFile OutputDebugStringA WriteConsoleW GetFileType OutputDebugStringW LoadLibraryW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage SetFilePointer MultiByteToWideChar InitializeCriticalSectionAndSpinCount LoadLibraryA SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile CloseHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

f4950d0ab093fcb3cedd0b4333e55c27_JaffaCakes118

kernel32

generic