02a4be2bb32a8c16aeccc58a036fb973_JaffaCakes118

General

Target
02a4be2bb32a8c16aeccc58a036fb973_JaffaCakes118
Size 238KB
Sample240930-wr668ssfjc
SHA256 17c8e089ef56e32ac844760c25000893f39816928a17758bb9ebef6b253ddf9c
MD5 02a4be2bb32a8c16aeccc58a036fb973
SHA1 108b94317a15d4b268130d3028e46b66ed82ae07
SHA512 56ca2e2b277f6a4a9c4d8d143efa9086d1f08caa4a61dddd5268b8cf0aba49862d9d36c285aacef89980e9a0a21e70ed5672210f1bd51f555334be4388bebf3a
SSDEEP 6144:xeaRFeYiZtnsLs/Xyihb124uKPoifbY/3sGIU5N5:xF7/iZtRXpu3ijwf5T
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02a4be2bb32a8c16aeccc58a036fb973_JaffaCakes118

File Explorer

02a4be2bb32a8c16aeccc58a036fb973_JaffaCakes118

.exe 238KB

02a4be2bb32a8c16aeccc58a036fb973_JaffaCakes118

IMPHASH d31cc935cd1c6935cd48a10ef09a7414
SHA256 17c8e089ef56e32ac844760c25000893f39816928a17758bb9ebef6b253ddf9c
MD5 02a4be2bb32a8c16aeccc58a036fb973
SHA1 108b94317a15d4b268130d3028e46b66ed82ae07
SHA512 56ca2e2b277f6a4a9c4d8d143efa9086d1f08caa4a61dddd5268b8cf0aba49862d9d36c285aacef89980e9a0a21e70ed5672210f1bd51f555334be4388bebf3a
SSDEEP 6144:xeaRFeYiZtnsLs/Xyihb124uKPoifbY/3sGIU5N5:xF7/iZtRXpu3ijwf5T
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hayamojenisuh\3 nod.pdb

kernel32

GetCommandLineW GetThreadContext SearchPathW lstrlenA FindResourceExW CallNamedPipeA InterlockedIncrement GetQueuedCompletionStatus GetCommState GetProfileStringW FreeEnvironmentStringsA GetNumberFormatA CreateActCtxW GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW GetVolumeInformationA LoadLibraryW GetSystemWow64DirectoryW GetSystemWindowsDirectoryA HeapDestroy GetBinaryTypeA GetCompressedFileSizeA QueryInformationJobObject GetStartupInfoW LCMapStringA GetPrivateProfileIntW SetThreadLocale FreeLibraryAndExitThread GetLastError SetLastError GetProcAddress CreateNamedPipeA SetStdHandle LoadLibraryA CreateSemaphoreW FindAtomA GetModuleFileNameA FindNextFileA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation GetCurrentDirectoryA GetCPInfoExA FindAtomW UnregisterWaitEx GetSystemTime CopyFileExA DeleteFileA InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW WriteFile GetStdHandle RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW GetStringTypeW MultiByteToWideChar LCMapStringW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent RaiseException CreateFileW CloseHandle FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

02a4be2bb32a8c16aeccc58a036fb973_JaffaCakes118

kernel32

generic