2eede1db82c0a931e1ae84dd63500c11_JaffaCakes118

General

Target
2eede1db82c0a931e1ae84dd63500c11_JaffaCakes118
Size 483KB
Sample241009-lrm39azgla
SHA256 81d1213774eac0f7f313388ee6206f7086cee9383c41385d717f61fd6b8fc9d0
MD5 2eede1db82c0a931e1ae84dd63500c11
SHA1 0d027e80282ec7df50dcdd3ee87adc41a14de616
SHA512 f8d991ffbe838cd427ff0aca4ccb0a418f19c9a25aa49395acc08017948f5f786ea099758b0ad40c0829e6218fd8d3aeb3e1f140b6fd43887d1e1496fb98a374
SSDEEP 12288:eeCILmru6xV0A2+EY2DJS0ZfoAF3eCyakS+g3qOHwoO:WILmqWEVFS0gXQ+qj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eede1db82c0a931e1ae84dd63500c11_JaffaCakes118

File Explorer

2eede1db82c0a931e1ae84dd63500c11_JaffaCakes118

.exe 483KB

2eede1db82c0a931e1ae84dd63500c11_JaffaCakes118

IMPHASH 41772127f978069b9f399090f08eba15
SHA256 81d1213774eac0f7f313388ee6206f7086cee9383c41385d717f61fd6b8fc9d0
MD5 2eede1db82c0a931e1ae84dd63500c11
SHA1 0d027e80282ec7df50dcdd3ee87adc41a14de616
SHA512 f8d991ffbe838cd427ff0aca4ccb0a418f19c9a25aa49395acc08017948f5f786ea099758b0ad40c0829e6218fd8d3aeb3e1f140b6fd43887d1e1496fb98a374
SSDEEP 12288:eeCILmru6xV0A2+EY2DJS0ZfoAF3eCyakS+g3qOHwoO:WILmqWEVFS0gXQ+qj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

360134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mudajulu\diwipafumu\pihodesimupe nix.pdb

kernel32

LeaveCriticalSection GetConsoleAliasesLengthA InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExW WriteConsoleInputW ReadConsoleInputA InitializeSListHead SetConsoleDisplayMode WriteConsoleA GetConsoleCP VerifyVersionInfoW CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionA EnumDateFormatsExA DeleteTimerQueue LoadLibraryA FlushInstructionCache SetConsoleCP FindFirstVolumeW ReadFile BuildCommDCBW VerLanguageNameW SetFileApisToANSI WriteProcessMemory SetEvent GetExitCodeThread EndUpdateResourceW GetCPInfoExA SetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx CreateActCtxW HeapUnlock DnsHostnameToComputerNameW ReadConsoleOutputW GlobalFindAtomW GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleW CreateThread GetVersionExA GetProcessAffinityMask WaitForSingleObject SetConsoleCursorPosition VerifyVersionInfoA lstrlenA WriteConsoleOutputCharacterA GetFileAttributesExA GetComputerNameA CommConfigDialogW GetConsoleAliasA GetSystemTime GetDiskFreeSpaceW CreateFileA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleMode FlushFileBuffers GetLocaleInfoW GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

2eede1db82c0a931e1ae84dd63500c11_JaffaCakes118

kernel32

user32

generic