4538e3df24ed8b8cd6a3474b2f0e1f74_JaffaCakes118

General

Target
4538e3df24ed8b8cd6a3474b2f0e1f74_JaffaCakes118
Size 621KB
Sample241015-b7tkvs1hlp
SHA256 46c2df358cebea0eed3ae32167c399a445ce0f106f473997775889f8ac2ca733
MD5 4538e3df24ed8b8cd6a3474b2f0e1f74
SHA1 e3b567e2b004c3a637b04a082b0ebbf98d6d37e0
SHA512 2286929bf5a7aab9e9aa88573fcea5dfff97faba7dff4aa9ca3754b7e0df48a511b46f97a17e25286a19ecdfd750e1660d4b15146b2b5cb9779c7790db299027
SSDEEP 12288:8LtsJ0XDsa21ugSSbujX45JbdSxqly5WxX8Vbc:ZJ0XyCU5JbWf8X8VY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4538e3df24ed8b8cd6a3474b2f0e1f74_JaffaCakes118

File Explorer

4538e3df24ed8b8cd6a3474b2f0e1f74_JaffaCakes118

.exe 621KB

4538e3df24ed8b8cd6a3474b2f0e1f74_JaffaCakes118

IMPHASH 7516bd35cc21aff34ab4b704c018e246
SHA256 46c2df358cebea0eed3ae32167c399a445ce0f106f473997775889f8ac2ca733
MD5 4538e3df24ed8b8cd6a3474b2f0e1f74
SHA1 e3b567e2b004c3a637b04a082b0ebbf98d6d37e0
SHA512 2286929bf5a7aab9e9aa88573fcea5dfff97faba7dff4aa9ca3754b7e0df48a511b46f97a17e25286a19ecdfd750e1660d4b15146b2b5cb9779c7790db299027
SSDEEP 12288:8LtsJ0XDsa21ugSSbujX45JbdSxqly5WxX8Vbc:ZJ0XyCU5JbWf8X8VY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wezibaw-him55.pdb

kernel32

GetCommandLineW GetComputerNameA GetThreadContext EnumResourceNamesW UnregisterWait WriteConsoleInputW SetFilePointer lstrlenA GetQueuedCompletionStatus InterlockedDecrement CompareFileTime CreateDirectoryW GlobalLock OpenSemaphoreA FreeEnvironmentStringsA GetTickCount GetConsoleAliasesLengthA WaitNamedPipeW WriteFile GetPriorityClass AddRefActCtx LoadLibraryW GetConsoleMode TerminateThread CopyFileW GetSystemWow64DirectoryW IsProcessorFeaturePresent CreateSemaphoreA IsDBCSLeadByte GetModuleFileNameW GetOverlappedResult CompareStringW LCMapStringA GetFileSizeEx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW OpenMutexW GetHandleInformation GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc ReadFileEx GetPrivateProfileStringA ResetEvent LoadLibraryA GetConsoleScreenBufferInfo LocalAlloc PostQueuedCompletionStatus WriteProfileSectionW FindAtomA HeapSetInformation GetConsoleCursorInfo FatalAppExitA SetThreadAffinityMask GetVersionExA TlsAlloc FindAtomW GetSystemTime CopyFileExA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleW Sleep InterlockedIncrement ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsGetValue TlsSetValue TlsFree GetLastError HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA HeapAlloc HeapSize HeapReAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP ReadFile CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

4538e3df24ed8b8cd6a3474b2f0e1f74_JaffaCakes118

kernel32

generic