1b7dbf198800af119607b4fd81e60e59_JaffaCakes118

General

Target
1b7dbf198800af119607b4fd81e60e59_JaffaCakes118
Size 10.5MB
Sample241007-e49z8awbpq
SHA256 4119098cb2c53b1fc2619b83c3eecee5e07dfda7c9e6734fd145721fad15cf65
MD5 1b7dbf198800af119607b4fd81e60e59
SHA1 f68c015bad7ec31ee18d4e097931511f329d59fc
SHA512 a432c931059746150d0072a212d102352640de6f8e81624b9549e7dd1f3883b14f71c549312af5bf24f0038ba23f43163d43057922cdf0ebb3b28e567ba9c9c9
SSDEEP 6144:frxbJOIoKZyaaUo9t+m7c74mOGjZP6NEpTvBzRxkac1B:jF/ZyaaUk+m7c7ZRiNEpTGa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b7dbf198800af119607b4fd81e60e59_JaffaCakes118

File Explorer

1b7dbf198800af119607b4fd81e60e59_JaffaCakes118

.exe 10.5MB

1b7dbf198800af119607b4fd81e60e59_JaffaCakes118

IMPHASH bb2ce1e2182a201f95af251a96da1408
SHA256 4119098cb2c53b1fc2619b83c3eecee5e07dfda7c9e6734fd145721fad15cf65
MD5 1b7dbf198800af119607b4fd81e60e59
SHA1 f68c015bad7ec31ee18d4e097931511f329d59fc
SHA512 a432c931059746150d0072a212d102352640de6f8e81624b9549e7dd1f3883b14f71c549312af5bf24f0038ba23f43163d43057922cdf0ebb3b28e567ba9c9c9
SSDEEP 6144:frxbJOIoKZyaaUo9t+m7c74mOGjZP6NEpTvBzRxkac1B:jF/ZyaaUk+m7c7ZRiNEpTGa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xuzukenol\bewegeg-nejogifafigi 69\wetirosamo_hog\bul\k.pdb

kernel32

FileTimeToDosDateTime HeapReAlloc GetNativeSystemInfo CopyFileExW TlsGetValue GetStringTypeA CallNamedPipeA InterlockedIncrement GetCommState ReadConsoleA GetNamedPipeHandleStateA CreateDirectoryW GlobalLock SetHandleInformation GetProfileStringW GetProfileSectionA CancelWaitableTimer FreeEnvironmentStringsA GetPrivateProfileStringW GetCommandLineA GlobalAlloc LoadLibraryW TerminateThread GetSystemWindowsDirectoryA VerifyVersionInfoA EnumResourceLanguagesA IsDBCSLeadByte GetCompressedFileSizeA GetSystemDirectoryA lstrlenW SetThreadPriority GetStartupInfoW WritePrivateProfileStringW GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetStdHandle GetCPInfoExW GetLastError GetThreadLocale GetProcAddress EnterCriticalSection CreateMemoryResourceNotification DisableThreadLibraryCalls LoadLibraryA FindAtomA SetSystemTime GetOEMCP Process32NextW FindNextFileA WriteProfileStringA GetModuleHandleA FreeEnvironmentStringsW GetCurrentDirectoryA GetCurrentThreadId LocalSize UnregisterWaitEx LCMapStringW GetVolumeInformationW HeapValidate IsBadReadPtr RaiseException LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW InterlockedDecrement RtlUnwind GetACP GetCPInfo IsValidCodePage GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeW GetLocaleInfoA LCMapStringA InitializeCriticalSectionAndSpinCount FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointer CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

1b7dbf198800af119607b4fd81e60e59_JaffaCakes118

kernel32

winhttp

generic