4f6d39f8098fde2447e57196cc96c622_JaffaCakes118

General

Target
4f6d39f8098fde2447e57196cc96c622_JaffaCakes118
Size 504KB
Sample241016-2pdd2a1apr
SHA256 6add18a5c5caf334240dab675cfcad4b82d94bc333f46bdb7c09e84676ec85d2
MD5 4f6d39f8098fde2447e57196cc96c622
SHA1 6b5755f6ca983bb9d9087bd7dfc105c6f20b42a0
SHA512 785a25172b14d005f9e95dc404dca77d050782aea5fdc9554c902a89f2077eded883bcd14902cd6f667d739d327609ff5777b460c160d6b3684cabbf9dca52fe
SSDEEP 6144:eLczX5eGVHYxvjx/2GL2YA3Gp86lJymuswtVymDyclKiXOgLpNdGn3RT1urRgij7:zeec7w0A3QH+m8tVymdZXZNdkh+RZLv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f6d39f8098fde2447e57196cc96c622_JaffaCakes118

File Explorer

4f6d39f8098fde2447e57196cc96c622_JaffaCakes118

.exe 504KB

4f6d39f8098fde2447e57196cc96c622_JaffaCakes118

IMPHASH 7716a0ae832b8460ad78d4842155ea6c
SHA256 6add18a5c5caf334240dab675cfcad4b82d94bc333f46bdb7c09e84676ec85d2
MD5 4f6d39f8098fde2447e57196cc96c622
SHA1 6b5755f6ca983bb9d9087bd7dfc105c6f20b42a0
SHA512 785a25172b14d005f9e95dc404dca77d050782aea5fdc9554c902a89f2077eded883bcd14902cd6f667d739d327609ff5777b460c160d6b3684cabbf9dca52fe
SSDEEP 6144:eLczX5eGVHYxvjx/2GL2YA3Gp86lJymuswtVymDyclKiXOgLpNdGn3RT1urRgij7:zeec7w0A3QH+m8tVymdZXZNdkh+RZLv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10929

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wonavimiton20.pdb

kernel32

lstrlenA FindResourceExW LocalCompact UpdateResourceA MoveFileExW GetUserDefaultLCID SetConsoleScreenBufferSize WriteConsoleInputA GetComputerNameW SetEvent GetSystemDefaultLCID GetProcessHeap IsBadReadPtr GetConsoleAliasesLengthA GetConsoleTitleA ReadConsoleW WriteFile CreateActCtxW GetVolumePathNameW ActivateActCtx GetConsoleCP GlobalFindAtomA TerminateThread ReadConsoleInputA GetSystemWindowsDirectoryA ReadConsoleOutputW SetConsoleCP InterlockedPopEntrySList DnsHostnameToComputerNameW lstrcpynW GetConsoleAliasW GetFileAttributesW VerifyVersionInfoA WriteConsoleW GetMailslotInfo GetTimeZoneInformation WriteConsoleOutputCharacterW SetConsoleTitleA InterlockedExchange GetCPInfoExW GetLastError GetLongPathNameW SetLastError GetProcAddress EnumDateFormatsExA GetConsoleDisplayMode EnterCriticalSection BuildCommDCBW LoadLibraryA GetProfileStringA GlobalGetAtomNameW WaitForMultipleObjects SetEnvironmentVariableA GetModuleHandleA lstrcatW EraseTape CancelTimerQueueTimer GetPrivateProfileSectionA VirtualProtect GetFileAttributesExW PeekConsoleInputA SetCalendarInfoA EndUpdateResourceA FindFirstVolumeW GetCurrentProcessId GlobalReAlloc GetSystemTime AreFileApisANSI CreateActCtxA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind GetModuleHandleW Sleep ExitProcess GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection HeapCreate VirtualFree VirtualAlloc FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

GetAltTabInfoA RealGetWindowClassA

advapi32

BackupEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

4f6d39f8098fde2447e57196cc96c622_JaffaCakes118

kernel32

user32

advapi32

generic