135e3b953016398bcd507f952cb8d8a8_JaffaCakes118

General

Target
135e3b953016398bcd507f952cb8d8a8_JaffaCakes118
Size 382KB
Sample241004-pphbrstfqm
SHA256 6acf924acc2978d82ac6b7adc976b07158cc09b7d64676175a9a1e61e6312c2c
MD5 135e3b953016398bcd507f952cb8d8a8
SHA1 7ccfae43db1dbae65a20503b11d5499903b728dc
SHA512 91d3bd47dcaabb3699fc5dca9eeabd8e530faabd30245a69a332186bbb1280341113c655916a2757ce49a6e35a4d25b5918503a58735c12debe2b1493614aaf9
SSDEEP 6144:z1iODljRPqur0A1W54NkZGiPlx8YhLj6VU7cEhCmLGdk+QttYtoF:EO5jRPqurp1WLZGqZjQEs4fqQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
135e3b953016398bcd507f952cb8d8a8_JaffaCakes118

File Explorer

135e3b953016398bcd507f952cb8d8a8_JaffaCakes118

.exe 382KB

135e3b953016398bcd507f952cb8d8a8_JaffaCakes118

IMPHASH c27a98a29b21693846ec47ce91a249f1
SHA256 6acf924acc2978d82ac6b7adc976b07158cc09b7d64676175a9a1e61e6312c2c
MD5 135e3b953016398bcd507f952cb8d8a8
SHA1 7ccfae43db1dbae65a20503b11d5499903b728dc
SHA512 91d3bd47dcaabb3699fc5dca9eeabd8e530faabd30245a69a332186bbb1280341113c655916a2757ce49a6e35a4d25b5918503a58735c12debe2b1493614aaf9
SSDEEP 6144:z1iODljRPqur0A1W54NkZGiPlx8YhLj6VU7cEhCmLGdk+QttYtoF:EO5jRPqurp1WLZGqZjQEs4fqQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\beyepasozocaj-zeh-24 jeluc-zan nu.pdb

kernel32

GetFileSize GetNativeSystemInfo SetFilePointer lstrlenA GetConsoleAliasesLengthW CopyFileExW SetLocalTime GetConsoleAliasExesLengthA InterlockedIncrement VerSetConditionMask GetCommState InterlockedDecrement ZombifyActCtx CompareFileTime GetSystemWindowsDirectoryW SetEnvironmentVariableW GlobalLock SetConsoleScreenBufferSize WriteConsoleInputA SetComputerNameW FreeEnvironmentStringsA VirtualFree SetProcessPriorityBoost FindResourceExA GetComputerNameExA GetFileAttributesW GetBinaryTypeA ReadFile UnregisterWait InterlockedExchange SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW OpenMutexW GetCurrentDirectoryW GetProcAddress CreateNamedPipeA WriteProfileSectionA ReadFileEx SetStdHandle DisableThreadLibraryCalls GetPrivateProfileStringA LoadLibraryA CreateSemaphoreW GetConsoleScreenBufferInfo LocalAlloc FindAtomA EnumResourceNamesA WriteProfileStringW CompareStringA FatalAppExitA GetVersionExA TlsAlloc FindAtomW DeleteFileW LCMapStringW AreFileApisANSI GetOverlappedResult GetComputerNameA GetLastError MoveFileA GetCommandLineA HeapValidate IsBadReadPtr RaiseException DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetHandleCount GetStdHandle GetFileType TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleW Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA GetModuleHandleA

gdi32

GetBoundsRect

Name

.text

Size

129KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

111KB

Virtual Size

46.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

81KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

135e3b953016398bcd507f952cb8d8a8_JaffaCakes118

kernel32

gdi32

generic