4e3446d2addc45368583d1bbc449fa7e_JaffaCakes118

General

Target
4e3446d2addc45368583d1bbc449fa7e_JaffaCakes118
Size 1.1MB
Sample241016-wf16vashma
SHA256 9e0114f6fe633289e4d39963ce337444d77b7920920ddf32a6143440b4590110
MD5 4e3446d2addc45368583d1bbc449fa7e
SHA1 be906de96feaa18f1a2a3043f82f2d2bb8860da7
SHA512 495ff5b89ce8341a1c716dc40b97b3851f5e155a4773c94b3cdb4a9be2b07a940344c4eb6d6b545d53cd2afdb9d0c16fd3386965ecc0b12e7e49727fa3feb99a
SSDEEP 24576:KN+cAPtAUWTR+nL/qmmfh3A0XfR/On9vvZWpOa4ec:KNnAlgoLimAw0J/qUkUc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e3446d2addc45368583d1bbc449fa7e_JaffaCakes118

File Explorer

4e3446d2addc45368583d1bbc449fa7e_JaffaCakes118

.exe 1.1MB

4e3446d2addc45368583d1bbc449fa7e_JaffaCakes118

IMPHASH 006a79ea8a61231651632116bf97f2d7
SHA256 9e0114f6fe633289e4d39963ce337444d77b7920920ddf32a6143440b4590110
MD5 4e3446d2addc45368583d1bbc449fa7e
SHA1 be906de96feaa18f1a2a3043f82f2d2bb8860da7
SHA512 495ff5b89ce8341a1c716dc40b97b3851f5e155a4773c94b3cdb4a9be2b07a940344c4eb6d6b545d53cd2afdb9d0c16fd3386965ecc0b12e7e49727fa3feb99a
SSDEEP 24576:KN+cAPtAUWTR+nL/qmmfh3A0XfR/On9vvZWpOa4ec:KNnAlgoLimAw0J/qUkUc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6936

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xifemol lizejasopene nagoguwinu4\socezesobec\niworisum\83_hu.pdb

kernel32

GetCommandLineW HeapReAlloc GetLocaleInfoA LoadResource InterlockedDecrement GetEnvironmentStringsW AddConsoleAliasW SetEvent OpenSemaphoreA GetSystemTimeAsFileTime WriteFileGather CreateActCtxW GetEnvironmentStrings LeaveCriticalSection GetFileAttributesA FindNextVolumeW GetDevicePowerState GetProcAddress FreeUserPhysicalPages VerLanguageNameW WriteConsoleA GetProcessId LocalAlloc RemoveDirectoryW WaitForMultipleObjects EnumResourceTypesW GetModuleFileNameA GetModuleHandleA EraseTape GetStringTypeW ReleaseMutex EndUpdateResourceA LocalSize FindFirstVolumeW FindNextVolumeA lstrcpyW HeapAlloc GetCommandLineA GetStartupInfoA DeleteCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle SetHandleCount GetFileType GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA CloseHandle CreateFileA

user32

GetCursorPos

Sharing

General

Malware Config

Signatures

File Explorer

4e3446d2addc45368583d1bbc449fa7e_JaffaCakes118

kernel32

user32

generic