29c1e4e4482eb01936de16ff0e11041c_JaffaCakes118

General

Target
29c1e4e4482eb01936de16ff0e11041c_JaffaCakes118
Size 12.8MB
Sample241009-dnw8rayemr
SHA256 8fe7c06b85bc726f57b04921a0695f69520a4d639f6c718a1d2d6067d347cc67
MD5 29c1e4e4482eb01936de16ff0e11041c
SHA1 69838a4c24177c6702a8d89a5c3bd83760449aaa
SHA512 425d09859a89aa7cac0420be192d3c3bc33d12f50e08a81c2b3eabfad89809b734d5f56ae236e1b2123ec6f62a0704a0a30b0226718d27f690ab504d071d9275
SSDEEP 24576:3nrnTREWa7SX1TOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOu:RJa7M
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29c1e4e4482eb01936de16ff0e11041c_JaffaCakes118

File Explorer

29c1e4e4482eb01936de16ff0e11041c_JaffaCakes118

.exe 12.8MB

29c1e4e4482eb01936de16ff0e11041c_JaffaCakes118

IMPHASH 762eb19010c0700eaa21fe941afb9920
SHA256 8fe7c06b85bc726f57b04921a0695f69520a4d639f6c718a1d2d6067d347cc67
MD5 29c1e4e4482eb01936de16ff0e11041c
SHA1 69838a4c24177c6702a8d89a5c3bd83760449aaa
SHA512 425d09859a89aa7cac0420be192d3c3bc33d12f50e08a81c2b3eabfad89809b734d5f56ae236e1b2123ec6f62a0704a0a30b0226718d27f690ab504d071d9275
SSDEEP 24576:3nrnTREWa7SX1TOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOu:RJa7M
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cowepuku\fifuwozasus\sucufoyohora\jitame54\siwu.pdb

kernel32

SetVolumeLabelA GetFileSize CreateMutexW SearchPathW WriteConsoleInputW CopyFileExW TlsGetValue GetProfileIntW MapUserPhysicalPages LoadResource InterlockedIncrement InterlockedDecrement ZombifyActCtx ScrollConsoleScreenBufferW CreateDirectoryW GetProfileSectionA SetComputerNameW GetComputerNameW GetCommProperties FreeEnvironmentStringsA GetProcessPriorityBoost GetModuleHandleW CreateNamedPipeW LocalFlags GetConsoleAliasesLengthA GetConsoleTitleA GetWindowsDirectoryA WriteFile SetCommState GetCommandLineA GetSystemWow64DirectoryA WriteFileGather EnumResourceTypesA CreateDirectoryExW FindResourceExA GlobalAlloc LoadLibraryW GetConsoleMode GetCalendarInfoA SetSystemTimeAdjustment GetSystemWindowsDirectoryA GetVersionExW SetConsoleCursorPosition VerifyVersionInfoA TerminateProcess IsDBCSLeadByte GetBinaryTypeW GetOverlappedResult lstrlenW SetConsoleTitleA GlobalUnlock LCMapStringA GetConsoleOutputCP InterlockedExchange SetThreadLocale GetProcAddress EnterCriticalSection SearchPathA BuildCommDCBW GetPrivateProfileStringA GetLocalTime OpenWaitableTimerW GetConsoleScreenBufferInfo IsSystemResumeAutomatic SetConsoleCtrlHandler WriteProfileSectionW FindAtomA GetTapeParameters GetDefaultCommConfigA SetConsoleCursorInfo GetCurrentDirectoryA CompareStringA GetConsoleCursorInfo SetThreadAffinityMask DeleteFileW InterlockedPushEntrySList AreFileApisANSI GetModuleHandleA FlushFileBuffers GetLastError DeleteFileA GetStartupInfoA HeapValidate IsBadReadPtr RaiseException DeleteCriticalSection LeaveCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsAlloc TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP SetStdHandle WriteConsoleA CreateFileA CloseHandle

user32

GetMenuInfo GetMessageTime GetMenuCheckMarkDimensions

Sharing

General

Malware Config

Signatures

File Explorer

29c1e4e4482eb01936de16ff0e11041c_JaffaCakes118

kernel32

user32

generic