1ecce7b894fc2132b3e7ec1c2681936d_JaffaCakes118

General

Target
1ecce7b894fc2132b3e7ec1c2681936d_JaffaCakes118
Size 11.3MB
Sample241008-bmdnxa1fkk
SHA256 368d36e214d321633cc73d84c3bd8879bb9ced7ccb906fee4657c585a11551b5
MD5 1ecce7b894fc2132b3e7ec1c2681936d
SHA1 d5f945e66f9d569636fa19a9a82232a6ed198859
SHA512 6aab60798b0256e19e145267394196e6f029d2e8ff1994e4c0efb82379fda34ec11dcc43d1b4fac9d065eb8e80eeb891a25abd82c3c71d017b4806eee331dc78
SSDEEP 49152:jGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGX:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ecce7b894fc2132b3e7ec1c2681936d_JaffaCakes118

File Explorer

1ecce7b894fc2132b3e7ec1c2681936d_JaffaCakes118

.exe 11.3MB

1ecce7b894fc2132b3e7ec1c2681936d_JaffaCakes118

IMPHASH ca5041463b2dd933d009ca1aebe1423c
SHA256 368d36e214d321633cc73d84c3bd8879bb9ced7ccb906fee4657c585a11551b5
MD5 1ecce7b894fc2132b3e7ec1c2681936d
SHA1 d5f945e66f9d569636fa19a9a82232a6ed198859
SHA512 6aab60798b0256e19e145267394196e6f029d2e8ff1994e4c0efb82379fda34ec11dcc43d1b4fac9d065eb8e80eeb891a25abd82c3c71d017b4806eee331dc78
SSDEEP 49152:jGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGX:
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

16393

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tikomayi33\leviwipacuxixe1\won.pdb

kernel32

GetLocaleInfoA MapUserPhysicalPages LoadResource HeapAlloc EndUpdateResourceW InterlockedDecrement GetCurrentProcess GetEnvironmentStringsW GetUserDefaultLCID WaitForSingleObject AddConsoleAliasW SetEvent GetCommandLineA CreateActCtxW GlobalAlloc ReadFileScatter LeaveCriticalSection FindNextVolumeW GetFileAttributesW WriteConsoleW GetDevicePowerState GetProcAddress VerLanguageNameA RemoveDirectoryA PrepareTape GetProcessId EnumResourceTypesW GetModuleFileNameA GetModuleHandleA ReleaseMutex LocalSize FindFirstVolumeW GetCurrentProcessId FindNextVolumeA lstrcpyW CreateFileA CloseHandle InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection GetLastError HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapCreate VirtualFree VirtualAlloc HeapReAlloc GetModuleHandleW ExitProcess WriteFile GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoW WriteConsoleA GetConsoleOutputCP

user32

SetCursorPos

Sharing

General

Malware Config

Signatures

File Explorer

1ecce7b894fc2132b3e7ec1c2681936d_JaffaCakes118

kernel32

user32

generic