055e3d97992efa668f7cd92ee301ebf4_JaffaCakes118

General

Target
055e3d97992efa668f7cd92ee301ebf4_JaffaCakes118
Size 337KB
Sample241001-l129jaxfmc
SHA256 090e8bd14dcd133d966ef11bf9ac340e9c55835d9a70c77a211cd15e8540a9a4
MD5 055e3d97992efa668f7cd92ee301ebf4
SHA1 326fb8c7e9fecb54570fdd9e3ee3165ca68658c9
SHA512 b8dc8317d049b4e3290badd6081c0bcadbd6c4a5af232395c96f92933c58da3de90cb846a7c1c707d7f306c547bb658871cfe3c73122ecea91ecb96d185710f8
SSDEEP 6144:8NN9wy0tamsE/6suyzgdygi/T0Yr6cfee3cf/zC:8bOXtamUsuyzGpib0oLfe8c3z
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
055e3d97992efa668f7cd92ee301ebf4_JaffaCakes118

File Explorer

055e3d97992efa668f7cd92ee301ebf4_JaffaCakes118

.exe 337KB

055e3d97992efa668f7cd92ee301ebf4_JaffaCakes118

IMPHASH 8476831dcd3ec87a4c86e61ca01b35a0
SHA256 090e8bd14dcd133d966ef11bf9ac340e9c55835d9a70c77a211cd15e8540a9a4
MD5 055e3d97992efa668f7cd92ee301ebf4
SHA1 326fb8c7e9fecb54570fdd9e3ee3165ca68658c9
SHA512 b8dc8317d049b4e3290badd6081c0bcadbd6c4a5af232395c96f92933c58da3de90cb846a7c1c707d7f306c547bb658871cfe3c73122ecea91ecb96d185710f8
SSDEEP 6144:8NN9wy0tamsE/6suyzgdygi/T0Yr6cfee3cf/zC:8bOXtamUsuyzGpib0oLfe8c3z
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hisabiwafovi_huc_mudatov43\diyoh.pdb

kernel32

GetCommandLineW GetThreadContext lstrlenA InterlockedIncrement GetQueuedCompletionStatus GetCommState GetSystemWindowsDirectoryW GetProfileStringW SetConsoleScreenBufferSize CallNamedPipeW FreeEnvironmentStringsA SetTapeParameters CreateNamedPipeW GetCompressedFileSizeW CreateActCtxW FindResourceExA GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetSystemWow64DirectoryW HeapDestroy CreateSemaphoreA GetBinaryTypeA QueryInformationJobObject GetStartupInfoW LCMapStringA GetLastError SetLastError GetProcAddress CreateNamedPipeA SetStdHandle SearchPathA GetNumberFormatW FindAtomA GetModuleFileNameA FindNextFileA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation GetCurrentDirectoryA OutputDebugStringA GetCPInfoExA FindAtomW DeleteFileW GetSystemTime CopyFileExA InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW WriteFile GetStdHandle RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW GetStringTypeW MultiByteToWideChar LCMapStringW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent RaiseException CreateFileW CloseHandle FlushFileBuffers

Name

.text

Size

100KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

165KB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

055e3d97992efa668f7cd92ee301ebf4_JaffaCakes118

kernel32

generic