0de42f2197cf5728faf682087329f429_JaffaCakes118

General

Target
0de42f2197cf5728faf682087329f429_JaffaCakes118
Size 249KB
Sample241003-exw5sathpr
SHA256 81c01c383358ce9260d1dacaaf4acb281c3a467e391283b40101e4b8756765ae
MD5 0de42f2197cf5728faf682087329f429
SHA1 f446810bcd3ef27c83e0e8156e61150b3a3d958a
SHA512 950f959b701da2dd44fb70fe1b80c2e32f2aeb8b50c875705a9d78c3b6cdf5fc93d4cd6bbd1359ca687fa339ce85fe9bc7933e1d8554c2a64d667873f385b4f4
SSDEEP 3072:7lzlWNjj+bLykqo6Hvu8fTtAk5kFmYx+kbhgScsYh6gSVywo3c+:7aOykqo6Hv7fT0FN+Y7knGyHM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0de42f2197cf5728faf682087329f429_JaffaCakes118

File Explorer

0de42f2197cf5728faf682087329f429_JaffaCakes118

.exe 249KB

0de42f2197cf5728faf682087329f429_JaffaCakes118

IMPHASH d01336643bf96b29567aa2447e71141a
SHA256 81c01c383358ce9260d1dacaaf4acb281c3a467e391283b40101e4b8756765ae
MD5 0de42f2197cf5728faf682087329f429
SHA1 f446810bcd3ef27c83e0e8156e61150b3a3d958a
SHA512 950f959b701da2dd44fb70fe1b80c2e32f2aeb8b50c875705a9d78c3b6cdf5fc93d4cd6bbd1359ca687fa339ce85fe9bc7933e1d8554c2a64d667873f385b4f4
SSDEEP 3072:7lzlWNjj+bLykqo6Hvu8fTtAk5kFmYx+kbhgScsYh6gSVywo3c+:7aOykqo6Hv7fT0FN+Y7knGyHM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9702

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cojokok\20 tikunufoli\64\haguzeva jaku.pdb

kernel32

lstrlenA MoveFileExW InterlockedDecrement WritePrivateProfileSectionA ReadConsoleOutputAttribute GetProfileStringW GetUserDefaultLCID WaitForSingleObject GetComputerNameW SetEvent IsBadReadPtr GetConsoleAliasesLengthA ReadConsoleOutputA GetUserDefaultLangID InitializeCriticalSection GetVolumePathNameW GetConsoleCP LocalShrink GetSystemWindowsDirectoryA InterlockedPopEntrySList LeaveCriticalSection lstrcpynW GetConsoleAliasW SetConsoleCursorPosition GetFileAttributesW WriteConsoleW ReadFile CreateFileW CreateActCtxA GetACP VerifyVersionInfoW GetLastError SetLastError GetProcAddress PeekConsoleInputW EnumDateFormatsExA GetConsoleDisplayMode GetProcessId LocalAlloc DeleteTimerQueue DnsHostnameToComputerNameA CreateTapePartition SetFileApisToANSI GlobalGetAtomNameW SetSystemTime SetEnvironmentVariableA SetConsoleTitleW GetModuleHandleA lstrcatW UpdateResourceW CancelTimerQueueTimer GetConsoleTitleW BuildCommDCBA VirtualProtect SetCalendarInfoA EndUpdateResourceA GetVersionExA FindFirstVolumeW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA RaiseException RtlUnwind GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapFree FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount VirtualAlloc HeapReAlloc HeapSize GetCPInfo GetOEMCP IsValidCodePage GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

0de42f2197cf5728faf682087329f429_JaffaCakes118

kernel32

user32

generic