0cfc8367505b43f71a3e388531f840ad_JaffaCakes118

General

Target
0cfc8367505b43f71a3e388531f840ad_JaffaCakes118
Size 12.3MB
Sample241002-3ypzvsxdkh
SHA256 f8546b64a0638ffe8267be96d09cf4790b9a89b1719b105cd99fd84e554a04da
MD5 0cfc8367505b43f71a3e388531f840ad
SHA1 666f8624dd821294c0b212f430b8a1a676b55914
SHA512 daeb6fd6456767b77a97cfce33b9d411f77ae4259883e338caf83e329119f830132e49f30704593afbcd574b3575d5cceb299a446ea04d0cad94f89aaecaa110
SSDEEP 49152:E9Yfn2sTQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQT:eYP2s
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cfc8367505b43f71a3e388531f840ad_JaffaCakes118

File Explorer

0cfc8367505b43f71a3e388531f840ad_JaffaCakes118

.exe 12.3MB

0cfc8367505b43f71a3e388531f840ad_JaffaCakes118

IMPHASH fb7a8c930d883fc72820f6899a564a32
SHA256 f8546b64a0638ffe8267be96d09cf4790b9a89b1719b105cd99fd84e554a04da
MD5 0cfc8367505b43f71a3e388531f840ad
SHA1 666f8624dd821294c0b212f430b8a1a676b55914
SHA512 daeb6fd6456767b77a97cfce33b9d411f77ae4259883e338caf83e329119f830132e49f30704593afbcd574b3575d5cceb299a446ea04d0cad94f89aaecaa110
SSDEEP 49152:E9Yfn2sTQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQT:eYP2s
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

160592

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pekuxizolemodun_zuyukimuvaxujarozat81 moja19 nos.pdb

kernel32

SetHandleInformation VirtualProtect SetLastError GetHandleInformation lstrlenW WriteFile FindNextFileA DebugActiveProcessStop DuplicateHandle lstrcatA SwitchToFiber GetLastError GlobalAlloc CloseHandle LoadLibraryW GetCurrencyFormatW GetProcAddress ExitProcess EndUpdateResourceA HeapSize WriteConsoleW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW LCMapStringW GetLocaleInfoW GetCPInfo SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW HeapAlloc HeapReAlloc HeapFree GetModuleHandleExW GetModuleFileNameW GetStdHandle GetACP FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP CreateFileW

user32

ChangeDisplaySettingsExW SendMessageW GetCursor EnumPropsA GetMonitorInfoA RegisterClassA GetProcessWindowStation InvalidateRect GetSystemMetrics

msimg32

TransparentBlt GradientFill

Sharing

General

Malware Config

Signatures

File Explorer

0cfc8367505b43f71a3e388531f840ad_JaffaCakes118

kernel32

user32

msimg32

generic