24f65dcc42b6801b30a7eb679b571372_JaffaCakes118

General

Target
24f65dcc42b6801b30a7eb679b571372_JaffaCakes118
Size 14.3MB
Sample241008-y666wsshlr
SHA256 be5f6be838cda666934c8154d4f504f55af259d4bd3642406c539148e673a905
MD5 24f65dcc42b6801b30a7eb679b571372
SHA1 cc39a9bc20d111ea4654e326774cb74d84abd3cd
SHA512 d21b631b35140f7d24910857cc45fee17dd2b64d05cde3469d27d7b00a603225d73b88af80ac48d4b4055ce881224fcaceab2cb0516b0044b96ce55730ee628e
SSDEEP 196608:CvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvP:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24f65dcc42b6801b30a7eb679b571372_JaffaCakes118

File Explorer

24f65dcc42b6801b30a7eb679b571372_JaffaCakes118

.exe 14.3MB

24f65dcc42b6801b30a7eb679b571372_JaffaCakes118

IMPHASH a53a5d09afe43fd7acdde28b47e9dc35
SHA256 be5f6be838cda666934c8154d4f504f55af259d4bd3642406c539148e673a905
MD5 24f65dcc42b6801b30a7eb679b571372
SHA1 cc39a9bc20d111ea4654e326774cb74d84abd3cd
SHA512 d21b631b35140f7d24910857cc45fee17dd2b64d05cde3469d27d7b00a603225d73b88af80ac48d4b4055ce881224fcaceab2cb0516b0044b96ce55730ee628e
SSDEEP 196608:CvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvP:
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

85126

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pefinujimefede\55\boxejiva30 vijiyololi xamuy74\rarovupup.pdb

kernel32

GetConsoleAliasesLengthA InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExW WriteConsoleInputW ReadConsoleInputA InitializeSListHead SetConsoleDisplayMode WriteConsoleA VerifyVersionInfoW CreateFileW WritePrivateProfileSectionA GetPrivateProfileSectionA EnumDateFormatsExA DeleteTimerQueue LoadLibraryW VirtualFree SetConsoleCP FindFirstVolumeA ReadFile BuildCommDCBW VerLanguageNameW SetFileApisToANSI GetConsoleCP LeaveCriticalSection SetEvent GetExitCodeThread EndUpdateResourceW GetCPInfoExA SetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx CreateActCtxW HeapUnlock DnsHostnameToComputerNameA ReadConsoleOutputW GlobalFindAtomW GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleW CreateThread GetVersionExA GetProcessAffinityMask WaitForSingleObject SetConsoleCursorPosition VerifyVersionInfoA lstrlenA WriteConsoleOutputCharacterW GetFileAttributesExA GetComputerNameA SetCriticalSectionSpinCount GetConsoleAliasA GetSystemTime GetDiskFreeSpaceW CreateFileA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle LoadLibraryA GetConsoleMode FlushFileBuffers GetLocaleInfoW GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

24f65dcc42b6801b30a7eb679b571372_JaffaCakes118

kernel32

user32

generic