3a8519e4f55bc93a4ffe59460d70499f_JaffaCakes118

General

Target
3a8519e4f55bc93a4ffe59460d70499f_JaffaCakes118
Size 10.3MB
Sample241012-rt1d9avfna
SHA256 aa5b8ec889dd4d8364e6f0e2b851e0a4c9100db76c2b8e3b593625d0dac2b3aa
MD5 3a8519e4f55bc93a4ffe59460d70499f
SHA1 85b43b33f7ca5f18b1e54da091a29a51680eb273
SHA512 0360bb359c66cba72e18898900e81bf9586b6cc166fe00465e7f3edc01d74ec00cda31d24dbde8332c4b67b23a6cd68d314ac19217bd795bd8dacac887510a8e
SSDEEP 49152:S88888888888888888888888888888888888888888888888888888888888888I:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a8519e4f55bc93a4ffe59460d70499f_JaffaCakes118

File Explorer

3a8519e4f55bc93a4ffe59460d70499f_JaffaCakes118

.exe 10.3MB

3a8519e4f55bc93a4ffe59460d70499f_JaffaCakes118

IMPHASH d3833f70f4683df10bc38b6f940f49e2
SHA256 aa5b8ec889dd4d8364e6f0e2b851e0a4c9100db76c2b8e3b593625d0dac2b3aa
MD5 3a8519e4f55bc93a4ffe59460d70499f
SHA1 85b43b33f7ca5f18b1e54da091a29a51680eb273
SHA512 0360bb359c66cba72e18898900e81bf9586b6cc166fe00465e7f3edc01d74ec00cda31d24dbde8332c4b67b23a6cd68d314ac19217bd795bd8dacac887510a8e
SSDEEP 49152:S88888888888888888888888888888888888888888888888888888888888888I:
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

31393

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dova\beyegu.pdb

kernel32

GetComputerNameA CreateFileA SetCriticalSectionSpinCount WriteConsoleInputW WriteConsoleOutputCharacterW lstrlenA GetConsoleAliasesLengthW BuildCommDCBAndTimeoutsA UpdateResourceA EndUpdateResourceW ReadConsoleA GetCurrentProcess ZombifyActCtx WritePrivateProfileSectionA InitializeSListHead GetSystemWindowsDirectoryW GetUserDefaultLCID WaitForSingleObject SetEvent GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW VirtualFree ReadConsoleOutputA CreateActCtxW GetConsoleCP LoadLibraryW ReadConsoleInputA CopyFileW SetConsoleCP LeaveCriticalSection GetConsoleAliasW SetConsoleCursorPosition GetGeoInfoA ReadFile CreateActCtxA GetConsoleOutputCP VerifyVersionInfoW SetLastError GetProcAddress VerLanguageNameA EnumDateFormatsExA HeapUnlock GetConsoleDisplayMode BuildCommDCBW WriteConsoleA InterlockedExchangeAdd DeleteTimerQueue DnsHostnameToComputerNameA SetConsoleDisplayMode GetExitCodeThread SetFileApisToANSI GetDiskFreeSpaceA GlobalFindAtomW SetConsoleTitleW LoadLibraryExA EraseTape GetProcessAffinityMask VirtualProtect GetFileTime GetCPInfoExA FindFirstVolumeA GetVersionExA GetPrivateProfileSectionW GetSystemTime CreateThread CloseHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent HeapReAlloc HeapAlloc GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleMode FlushFileBuffers GetLocaleInfoW WriteConsoleW

user32

GetAltTabInfoW RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

3a8519e4f55bc93a4ffe59460d70499f_JaffaCakes118

kernel32

user32

generic