15d4d4bc8ed67fa74d66fe6916c31b90_JaffaCakes118

General

Target
15d4d4bc8ed67fa74d66fe6916c31b90_JaffaCakes118
Size 239KB
Sample241005-c4t8navdpg
SHA256 721e647c410d5b1a11fa7f0cf738fd5ebae93e22a3603ef717534eb127534b77
MD5 15d4d4bc8ed67fa74d66fe6916c31b90
SHA1 60822f14ffc83bf592cf8680d7ee76e132288811
SHA512 d66c56e07838c4d87f5bcf728cf4780bcc5d9cc509e40816d7518760f97ebe7394935a9fe7eba5b30e2d3ae201b07cdd26491c75ac798ed5fd74fe72ce0470f7
SSDEEP 6144:fesoFeYHECHsLsx6mihb12P5qpWV0m68jM7LjmpeM:fnu/HECz6S5QWlnqOpe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15d4d4bc8ed67fa74d66fe6916c31b90_JaffaCakes118

File Explorer

15d4d4bc8ed67fa74d66fe6916c31b90_JaffaCakes118

.exe 239KB

15d4d4bc8ed67fa74d66fe6916c31b90_JaffaCakes118

IMPHASH d31cc935cd1c6935cd48a10ef09a7414
SHA256 721e647c410d5b1a11fa7f0cf738fd5ebae93e22a3603ef717534eb127534b77
MD5 15d4d4bc8ed67fa74d66fe6916c31b90
SHA1 60822f14ffc83bf592cf8680d7ee76e132288811
SHA512 d66c56e07838c4d87f5bcf728cf4780bcc5d9cc509e40816d7518760f97ebe7394935a9fe7eba5b30e2d3ae201b07cdd26491c75ac798ed5fd74fe72ce0470f7
SSDEEP 6144:fesoFeYHECHsLsx6mihb12P5qpWV0m68jM7LjmpeM:fnu/HECz6S5QWlnqOpe
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vopoj-todacib\d.pdb

kernel32

GetCommandLineW GetThreadContext SearchPathW lstrlenA FindResourceExW CallNamedPipeA InterlockedIncrement GetQueuedCompletionStatus GetCommState GetProfileStringW FreeEnvironmentStringsA GetNumberFormatA CreateActCtxW GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW GetVolumeInformationA LoadLibraryW GetSystemWow64DirectoryW GetSystemWindowsDirectoryA HeapDestroy GetBinaryTypeA GetCompressedFileSizeA QueryInformationJobObject GetStartupInfoW LCMapStringA GetPrivateProfileIntW SetThreadLocale FreeLibraryAndExitThread GetLastError SetLastError GetProcAddress CreateNamedPipeA SetStdHandle LoadLibraryA CreateSemaphoreW FindAtomA GetModuleFileNameA FindNextFileA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation GetCurrentDirectoryA GetCPInfoExA FindAtomW UnregisterWaitEx GetSystemTime CopyFileExA DeleteFileA InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW WriteFile GetStdHandle RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW GetStringTypeW MultiByteToWideChar LCMapStringW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent RaiseException CreateFileW CloseHandle FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

15d4d4bc8ed67fa74d66fe6916c31b90_JaffaCakes118

kernel32

generic