749bdb421750e541d7105c7b23aae529_JaffaCakes118

General

Target
749bdb421750e541d7105c7b23aae529_JaffaCakes118
Size 351KB
Sample241024-v78jkatgle
SHA256 de4951605496dbd1b5e05f579b2601f45c459b9154b2c6a215517c4f8b3d0daf
MD5 749bdb421750e541d7105c7b23aae529
SHA1 1773f8dcabe2382a3f1d29f78652591662ab60a1
SHA512 5afe0e48464dd28499c0f4bf416e6806e05515926f80ad7722042fe39b6a3fe37e7d236445483a6ad4c0c5e81f7d930755772963431845a2d7ae4c9c65cf684d
SSDEEP 6144:zK+v8C1X5Oe4SlCRtNFPQGqE2H8AxXzrRgbmjTwa/RxJg:zK+v8CTOk2TDqE2H84ROyY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
749bdb421750e541d7105c7b23aae529_JaffaCakes118

File Explorer

749bdb421750e541d7105c7b23aae529_JaffaCakes118

.exe 351KB

749bdb421750e541d7105c7b23aae529_JaffaCakes118

IMPHASH 9ef9b5692972468f136ccb3a25ab5d5b
SHA256 de4951605496dbd1b5e05f579b2601f45c459b9154b2c6a215517c4f8b3d0daf
MD5 749bdb421750e541d7105c7b23aae529
SHA1 1773f8dcabe2382a3f1d29f78652591662ab60a1
SHA512 5afe0e48464dd28499c0f4bf416e6806e05515926f80ad7722042fe39b6a3fe37e7d236445483a6ad4c0c5e81f7d930755772963431845a2d7ae4c9c65cf684d
SSDEEP 6144:zK+v8C1X5Oe4SlCRtNFPQGqE2H8AxXzrRgbmjTwa/RxJg:zK+v8CTOk2TDqE2H84ROyY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10897

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\toluzab\10\kadivi38\kusepahoy.pdb

kernel32

lstrlenA FindResourceExW LocalCompact UpdateResourceA MoveFileExW GetUserDefaultLCID SetConsoleScreenBufferSize WriteConsoleInputA GetComputerNameW SetEvent GetSystemDefaultLCID GetProcessHeap GetConsoleAliasesLengthA GetConsoleTitleA ReadConsoleW WriteFile CreateActCtxW GetVolumePathNameW ActivateActCtx GetConsoleCP GlobalFindAtomA TerminateThread ReadConsoleInputA GetSystemWindowsDirectoryA ReadConsoleOutputW SetConsoleCP InterlockedPopEntrySList DnsHostnameToComputerNameW lstrcpynW GetConsoleAliasW GetFileAttributesW VerifyVersionInfoA WriteConsoleW GetMailslotInfo GetTimeZoneInformation WriteConsoleOutputCharacterW SetConsoleTitleA InterlockedExchange GetCPInfoExW GetLastError GetLongPathNameW SetLastError GetProcAddress EnumDateFormatsExA GetConsoleDisplayMode EnterCriticalSection BuildCommDCBW LoadLibraryA GetProfileStringA GlobalGetAtomNameW WaitForMultipleObjects SetEnvironmentVariableA GetModuleHandleA lstrcatW EraseTape CancelTimerQueueTimer GetPrivateProfileSectionA VirtualProtect GetFileAttributesExW SetCalendarInfoA EndUpdateResourceA FindFirstVolumeW GetCurrentProcessId GlobalReAlloc GetSystemTime AreFileApisANSI CreateActCtxA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind GetModuleHandleW Sleep ExitProcess GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection HeapCreate VirtualFree VirtualAlloc FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

GetAltTabInfoA RealGetWindowClassA

advapi32

BackupEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

749bdb421750e541d7105c7b23aae529_JaffaCakes118

kernel32

user32

advapi32

generic