2afa3fb82767433fcfdc04d4d46f9ff4_JaffaCakes118

General

Target
2afa3fb82767433fcfdc04d4d46f9ff4_JaffaCakes118
Size 202KB
Sample241009-e9vsgsxgnm
SHA256 df1ed1e0417dff924ed42f07f06aefdb8def643661c693ddeb7ec1bb63c255d6
MD5 2afa3fb82767433fcfdc04d4d46f9ff4
SHA1 497355a939bc7a04f303d05dfb046c5bd11857f1
SHA512 3dcd05e35609fc163688562b8a8dd1bc9d9c6a67098b7db590d96324f063123ff23c5a0229c9a6f43d56308f80460d42b8f8113cc6d8a51275690dae94a13655
SSDEEP 3072:Ya1qQA5osTfGOJdL3QkK5kOrcPI1Ze6TRkr8EuSzszR:YaM6sTJnLnIcPI1LTyuSz+R
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2afa3fb82767433fcfdc04d4d46f9ff4_JaffaCakes118

File Explorer

2afa3fb82767433fcfdc04d4d46f9ff4_JaffaCakes118

.exe 202KB

2afa3fb82767433fcfdc04d4d46f9ff4_JaffaCakes118

IMPHASH 5dbcbed365563713c1a9bb2780528a54
SHA256 df1ed1e0417dff924ed42f07f06aefdb8def643661c693ddeb7ec1bb63c255d6
MD5 2afa3fb82767433fcfdc04d4d46f9ff4
SHA1 497355a939bc7a04f303d05dfb046c5bd11857f1
SHA512 3dcd05e35609fc163688562b8a8dd1bc9d9c6a67098b7db590d96324f063123ff23c5a0229c9a6f43d56308f80460d42b8f8113cc6d8a51275690dae94a13655
SSDEEP 3072:Ya1qQA5osTfGOJdL3QkK5kOrcPI1Ze6TRkr8EuSzszR:YaM6sTJnLnIcPI1LTyuSz+R
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6890

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\suzoga\kukefikomefeji\le.pdb

kernel32

GetCommandLineW GetLocaleInfoA LoadResource HeapAlloc InterlockedDecrement GetEnvironmentStringsW WaitForSingleObject AddConsoleAliasW SetEvent GetEnvironmentStrings ReadFileScatter LeaveCriticalSection GetFileAttributesA FindNextVolumeW CreateActCtxA GetDevicePowerState GetProcAddress FreeUserPhysicalPages VerLanguageNameW WriteConsoleA GetProcessId LocalAlloc RemoveDirectoryW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA EraseTape ReleaseMutex EndUpdateResourceA LocalSize FindFirstVolumeW FindNextVolumeA lstrcpyW GetCommandLineA GetStartupInfoA DeleteCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle SetHandleCount GetFileType GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CloseHandle CreateFileA

user32

SetCursorPos

Sharing

General

Malware Config

Signatures

File Explorer

2afa3fb82767433fcfdc04d4d46f9ff4_JaffaCakes118

kernel32

user32

generic