1f36b2a211561d23f8ea7372a60e8a4b_JaffaCakes118

General

Target
1f36b2a211561d23f8ea7372a60e8a4b_JaffaCakes118
Size 11.2MB
Sample241008-dfcjdazbra
SHA256 f757ceb07ad1a7d8f37e182181a8264adc0ba6c4945911b98620b2c09393e210
MD5 1f36b2a211561d23f8ea7372a60e8a4b
SHA1 e6917bd75a288889f21179e6f4373efcf9e91816
SHA512 cd0328d2b354b982a742750701c220eaac2e3eca88d41d08c57bf3414e8ef13d135cedd2491ab834b30a7e9e7d52a9a682098f00ae52e704a007976f974d34b2
SSDEEP 49152:5lGypVbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb7:5lGyp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f36b2a211561d23f8ea7372a60e8a4b_JaffaCakes118

File Explorer

1f36b2a211561d23f8ea7372a60e8a4b_JaffaCakes118

.exe 11.2MB

1f36b2a211561d23f8ea7372a60e8a4b_JaffaCakes118

IMPHASH 2c0d871b9d705ff5fb3ba78cc6deb20a
SHA256 f757ceb07ad1a7d8f37e182181a8264adc0ba6c4945911b98620b2c09393e210
MD5 1f36b2a211561d23f8ea7372a60e8a4b
SHA1 e6917bd75a288889f21179e6f4373efcf9e91816
SHA512 cd0328d2b354b982a742750701c220eaac2e3eca88d41d08c57bf3414e8ef13d135cedd2491ab834b30a7e9e7d52a9a682098f00ae52e704a007976f974d34b2
SSDEEP 49152:5lGypVbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb7:5lGyp
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5253

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\miperoyinapogiw_nuk.pdb

kernel32

FillConsoleOutputCharacterA GetHandleInformation GetTempPathW lstrlenA DuplicateHandle lstrcatA ExitThread GetModuleHandleA ProcessIdToSessionId GetLastError GlobalAlloc CloseHandle GetCurrencyFormatW PeekConsoleInputW GetProcAddress EnumSystemLocalesW GlobalMemoryStatus GetTickCount AllocConsole UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc FlushFileBuffers GetConsoleCP GetConsoleMode GetStringTypeW ReadFile ReadConsoleW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetFileType GetProcessHeap DecodePointer SetFilePointerEx WriteConsoleW HeapSize HeapReAlloc RaiseException CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

1f36b2a211561d23f8ea7372a60e8a4b_JaffaCakes118

kernel32

generic