3196cfb0c2d6a63acf05eb1dbebd4820_JaffaCakes118

General

Target
3196cfb0c2d6a63acf05eb1dbebd4820_JaffaCakes118
Size 543KB
Sample241010-ynwmfatepg
SHA256 725fa4daee6261e5592a71c3d6c7dc45da73246bb998902556e01d00ed9996ed
MD5 3196cfb0c2d6a63acf05eb1dbebd4820
SHA1 d2287f49ee59cfb0d7e03b20ff53db26f8670e72
SHA512 9ba2d7e2ea95babd0168e8276ff8c8958e5bb42235bda1f88a8c7f239a369269488fcc26c2cab7badd68d046e7910e67a23afc6b3a6ae4875767926043528fc5
SSDEEP 12288:EzpEEq3prztTIO7eAz0q4dQN0cGc+v+6LFh:EVQ3pr9nDgQN0TfvLLFh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3196cfb0c2d6a63acf05eb1dbebd4820_JaffaCakes118

File Explorer

3196cfb0c2d6a63acf05eb1dbebd4820_JaffaCakes118

.exe 543KB

3196cfb0c2d6a63acf05eb1dbebd4820_JaffaCakes118

IMPHASH 56c207817e66e7690a43bf97b1ee7374
SHA256 725fa4daee6261e5592a71c3d6c7dc45da73246bb998902556e01d00ed9996ed
MD5 3196cfb0c2d6a63acf05eb1dbebd4820
SHA1 d2287f49ee59cfb0d7e03b20ff53db26f8670e72
SHA512 9ba2d7e2ea95babd0168e8276ff8c8958e5bb42235bda1f88a8c7f239a369269488fcc26c2cab7badd68d046e7910e67a23afc6b3a6ae4875767926043528fc5
SSDEEP 12288:EzpEEq3prztTIO7eAz0q4dQN0cGc+v+6LFh:EVQ3pr9nDgQN0TfvLLFh
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8976

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\samawedonuyi.pdb

kernel32

TlsGetValue SetLocalTime InterlockedIncrement GetCommState GetProfileStringW UnlockFile CallNamedPipeW FreeEnvironmentStringsA GetNumberFormatA FindResourceExA GlobalAlloc GetPrivateProfileIntA LoadLibraryW GetConsoleAliasExesLengthW HeapDestroy CreateSemaphoreA EnumResourceLanguagesA GetModuleFileNameW GetCompressedFileSizeA GetSystemDirectoryA CreateActCtxA GetBinaryTypeW LCMapStringA GetStartupInfoA lstrlenA GetStdHandle FreeLibraryAndExitThread GetLastError GetProcAddress CreateNamedPipeA EnterCriticalSection LoadLibraryA OpenMutexA WritePrivateProfileStringA SetThreadIdealProcessor FindAtomA SetSystemTime FindNextFileA WriteProfileStringA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation GetCurrentDirectoryA SetFileShortNameA UnregisterWaitEx CopyFileExA DeleteFileA GetVolumeInformationW LocalFileTimeToFileTime GetThreadContext SetThreadLocale GetCommandLineW WideCharToMultiByte EncodePointer DecodePointer GetCommandLineA GetStartupInfoW InterlockedDecrement GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError HeapValidate IsBadReadPtr LeaveCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate IsProcessorFeaturePresent OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree SetStdHandle FlushFileBuffers RaiseException CreateFileW CloseHandle

advapi32

InitiateSystemShutdownA AbortSystemShutdownA

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

3196cfb0c2d6a63acf05eb1dbebd4820_JaffaCakes118

kernel32

advapi32

winhttp

generic