3e817c73034529dfd8f8ada1862c7e3e_JaffaCakes118

General

Target
3e817c73034529dfd8f8ada1862c7e3e_JaffaCakes118
Size 503KB
Sample241013-h3ttdsvbmd
SHA256 a3b39be8c42e45beedebf1c819fa5f7e3c1f195fe104ddf83c2a12804c2d5a51
MD5 3e817c73034529dfd8f8ada1862c7e3e
SHA1 fa3d82544d00db105e98d46b51578fc46e2c1eb7
SHA512 c088dbb8991f18a24cf5cc3c1ab81e700aac87b4d2c2bf00087e0a8f7ea29ca7f3cc707501c56ab553847a099c5f492890e7f24d6394f7b31f6f9ab0d579f801
SSDEEP 6144:Y9+dnfpe6txHjCfXsYJ8Awyu1pRyjPqAG7Ni5yDp6UZzpntuiih7knGyHM:YgkSxDCfXsY2yeQPqzQ5A6UZzRQ/I
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e817c73034529dfd8f8ada1862c7e3e_JaffaCakes118

File Explorer

3e817c73034529dfd8f8ada1862c7e3e_JaffaCakes118

.exe 503KB

3e817c73034529dfd8f8ada1862c7e3e_JaffaCakes118

IMPHASH 4b405a935ba1896da801696a6c1a4ade
SHA256 a3b39be8c42e45beedebf1c819fa5f7e3c1f195fe104ddf83c2a12804c2d5a51
MD5 3e817c73034529dfd8f8ada1862c7e3e
SHA1 fa3d82544d00db105e98d46b51578fc46e2c1eb7
SHA512 c088dbb8991f18a24cf5cc3c1ab81e700aac87b4d2c2bf00087e0a8f7ea29ca7f3cc707501c56ab553847a099c5f492890e7f24d6394f7b31f6f9ab0d579f801
SSDEEP 6144:Y9+dnfpe6txHjCfXsYJ8Awyu1pRyjPqAG7Ni5yDp6UZzpntuiih7knGyHM:YgkSxDCfXsY2yeQPqzQ5A6UZzRQ/I
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9686

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nojebevax.pdb

kernel32

GetComputerNameA lstrlenA LocalCompact MoveFileExW InterlockedDecrement WritePrivateProfileSectionA ReadConsoleOutputAttribute GetProfileStringW GetUserDefaultLCID SetEvent IsBadReadPtr GetConsoleAliasesLengthA ReadConsoleOutputA InitializeCriticalSection GetVolumePathNameW GetConsoleCP GetSystemWindowsDirectoryA InterlockedPopEntrySList LeaveCriticalSection lstrcpynW GetConsoleAliasW SetConsoleCursorPosition GetFileAttributesW WriteConsoleW ReadFile CreateFileW CreateActCtxA GetACP VerifyVersionInfoW GetLastError GetProcAddress PeekConsoleInputW EnumDateFormatsExA GetConsoleDisplayMode GetProcessId LocalAlloc DeleteTimerQueue DnsHostnameToComputerNameA CreateTapePartition GlobalGetAtomNameW WaitForMultipleObjects SetSystemTime SetEnvironmentVariableA SetConsoleTitleW GetModuleHandleA lstrcatW UpdateResourceW CancelTimerQueueTimer GetConsoleTitleW BuildCommDCBA VirtualProtect SetCalendarInfoA FindFirstVolumeA EndUpdateResourceA GetVersionExA AreFileApisANSI UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA RaiseException RtlUnwind GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapFree FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount VirtualAlloc HeapReAlloc HeapSize GetCPInfo GetOEMCP IsValidCodePage GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

3e817c73034529dfd8f8ada1862c7e3e_JaffaCakes118

kernel32

user32

generic