40a22b8b25173fab796f01c5f6279cb8_JaffaCakes118

General

Target
40a22b8b25173fab796f01c5f6279cb8_JaffaCakes118
Size 14.2MB
Sample241013-sw9ldatdkc
SHA256 b6cf6e78306d7eb742e4f758aad5eea3248fdd6c6243ee069e90e9c4c64c373e
MD5 40a22b8b25173fab796f01c5f6279cb8
SHA1 2e23ee8c8f97fa749637694b0d00025800157f68
SHA512 b580fee075112912c366c6f8fee223a7afb5d5e78c86989344285df35b5ebc48a072ec3a55ee5713d705dc553e907f14c7b5722e55209c23611077161c883c50
SSDEEP 6144:ArxbJOIoKZyaaUo9t+m7c74mOGjZP6NEpTvBzRxkac1B:MF/ZyaaUk+m7c7ZRiNEpTGa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40a22b8b25173fab796f01c5f6279cb8_JaffaCakes118

File Explorer

40a22b8b25173fab796f01c5f6279cb8_JaffaCakes118

.exe 14.2MB

40a22b8b25173fab796f01c5f6279cb8_JaffaCakes118

IMPHASH bb2ce1e2182a201f95af251a96da1408
SHA256 b6cf6e78306d7eb742e4f758aad5eea3248fdd6c6243ee069e90e9c4c64c373e
MD5 40a22b8b25173fab796f01c5f6279cb8
SHA1 2e23ee8c8f97fa749637694b0d00025800157f68
SHA512 b580fee075112912c366c6f8fee223a7afb5d5e78c86989344285df35b5ebc48a072ec3a55ee5713d705dc553e907f14c7b5722e55209c23611077161c883c50
SSDEEP 6144:ArxbJOIoKZyaaUo9t+m7c74mOGjZP6NEpTvBzRxkac1B:MF/ZyaaUk+m7c7ZRiNEpTGa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xuzukenol\bewegeg-nejogifafigi 69\wetirosamo_hog\bul\k.pdb

kernel32

FileTimeToDosDateTime HeapReAlloc GetNativeSystemInfo CopyFileExW TlsGetValue GetStringTypeA CallNamedPipeA InterlockedIncrement GetCommState ReadConsoleA GetNamedPipeHandleStateA CreateDirectoryW GlobalLock SetHandleInformation GetProfileStringW GetProfileSectionA CancelWaitableTimer FreeEnvironmentStringsA GetPrivateProfileStringW GetCommandLineA GlobalAlloc LoadLibraryW TerminateThread GetSystemWindowsDirectoryA VerifyVersionInfoA EnumResourceLanguagesA IsDBCSLeadByte GetCompressedFileSizeA GetSystemDirectoryA lstrlenW SetThreadPriority GetStartupInfoW WritePrivateProfileStringW GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetStdHandle GetCPInfoExW GetLastError GetThreadLocale GetProcAddress EnterCriticalSection CreateMemoryResourceNotification DisableThreadLibraryCalls LoadLibraryA FindAtomA SetSystemTime GetOEMCP Process32NextW FindNextFileA WriteProfileStringA GetModuleHandleA FreeEnvironmentStringsW GetCurrentDirectoryA GetCurrentThreadId LocalSize UnregisterWaitEx LCMapStringW GetVolumeInformationW HeapValidate IsBadReadPtr RaiseException LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW InterlockedDecrement RtlUnwind GetACP GetCPInfo IsValidCodePage GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeW GetLocaleInfoA LCMapStringA InitializeCriticalSectionAndSpinCount FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointer CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

40a22b8b25173fab796f01c5f6279cb8_JaffaCakes118

kernel32

winhttp

generic