14c589ee90fb620a15781610a7ff247b_JaffaCakes118

General

Target
14c589ee90fb620a15781610a7ff247b_JaffaCakes118
Size 4.4MB
Sample241004-yym32stfkl
SHA256 6a29cc74a5e4c341dbb8e7d1cc9411b7de3ad8fd5eaeb04f3bc74d204852a835
MD5 14c589ee90fb620a15781610a7ff247b
SHA1 5f0cd44258c3dfce50c704493270fb0eeee6d873
SHA512 dba0c8c19331a33e9e927df6319640bd591e98cb8324a6a1f8bb60970cdcce0ec8e8d3809a26e1ba9a56525001bacb67141dc2bb52446cc22c514891e974fa68
SSDEEP 98304:jIWgd2ErDf6cJoycz/ALDnaOfZISMcM7sTXjaCFhXy4lIcVE:jy2of3oye4Dn7u0MuXjaCRh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14c589ee90fb620a15781610a7ff247b_JaffaCakes118

File Explorer

14c589ee90fb620a15781610a7ff247b_JaffaCakes118

.exe 4.4MB

14c589ee90fb620a15781610a7ff247b_JaffaCakes118

IMPHASH 69d02296fd41d5fbc6c18775cf2c5cb0
SHA256 6a29cc74a5e4c341dbb8e7d1cc9411b7de3ad8fd5eaeb04f3bc74d204852a835
MD5 14c589ee90fb620a15781610a7ff247b
SHA1 5f0cd44258c3dfce50c704493270fb0eeee6d873
SHA512 dba0c8c19331a33e9e927df6319640bd591e98cb8324a6a1f8bb60970cdcce0ec8e8d3809a26e1ba9a56525001bacb67141dc2bb52446cc22c514891e974fa68
SSDEEP 98304:jIWgd2ErDf6cJoycz/ALDnaOfZISMcM7sTXjaCFhXy4lIcVE:jy2of3oye4Dn7u0MuXjaCRh
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dohe.pdb

kernel32

GetCommandLineW GetThreadContext SearchPathW lstrlenA FreeLibrary InterlockedIncrement GetQueuedCompletionStatus GetCommState GetProfileStringW CallNamedPipeW FreeEnvironmentStringsA GetNumberFormatA CreateActCtxW FindResourceExA GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW GetVolumeInformationA LoadLibraryW GetSystemWow64DirectoryW GetSystemWindowsDirectoryA HeapDestroy GetBinaryTypeA GetCompressedFileSizeA GetStartupInfoW LCMapStringA GetPrivateProfileIntW SetThreadLocale GetStdHandle GetLastError SetLastError GetProcAddress CreateNamedPipeA LoadLibraryA CreateSemaphoreW FindAtomA GetModuleFileNameA FindNextFileA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation FreeEnvironmentStringsW GetCurrentDirectoryA GetCPInfoExA TerminateJobObject FindAtomW UnregisterWaitEx GetSystemTime CopyFileExA DeleteFileA CloseHandle CreateFileW InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW WriteFile RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW GetStringTypeW MultiByteToWideChar LCMapStringW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent SetStdHandle RaiseException FlushFileBuffers

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

14c589ee90fb620a15781610a7ff247b_JaffaCakes118

kernel32

winhttp

generic