8b781b88987500ec50c623ccf8aa6a8a_JaffaCakes118

General

Target
8b781b88987500ec50c623ccf8aa6a8a_JaffaCakes118
Size 287KB
Sample241103-plbd2steqh
SHA256 c9ce74a6fde17c62cff139a74cb86d26c53196d0712a3ae677fa74910b34047b
MD5 8b781b88987500ec50c623ccf8aa6a8a
SHA1 857882d0763580b23e64e1f3e4f7eb7bd9173b5b
SHA512 d5f730c21bb733beb4230d006b2cb39a2a560598c08832ab6510a600eb80371cc72d05a3f45f5131a54faa8346916ac49c4f1963c17dc4eecf2de786308ac2cb
SSDEEP 6144:8wkmQ1kUgOdYL9yOPoeA8rFXj77QWldyQG1/e:PrXyYL9yOPk8rFT70WY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b781b88987500ec50c623ccf8aa6a8a_JaffaCakes118

File Explorer

8b781b88987500ec50c623ccf8aa6a8a_JaffaCakes118

.exe 287KB

8b781b88987500ec50c623ccf8aa6a8a_JaffaCakes118

IMPHASH cc55eae86408874fd9cf40c59e028154
SHA256 c9ce74a6fde17c62cff139a74cb86d26c53196d0712a3ae677fa74910b34047b
MD5 8b781b88987500ec50c623ccf8aa6a8a
SHA1 857882d0763580b23e64e1f3e4f7eb7bd9173b5b
SHA512 d5f730c21bb733beb4230d006b2cb39a2a560598c08832ab6510a600eb80371cc72d05a3f45f5131a54faa8346916ac49c4f1963c17dc4eecf2de786308ac2cb
SSDEEP 6144:8wkmQ1kUgOdYL9yOPoeA8rFXj77QWldyQG1/e:PrXyYL9yOPk8rFT70WY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8976

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\ramuvetifofuwi_19_kiwemayama_cenudupafehige xedosid2\vi.pdb

kernel32

TlsGetValue SetLocalTime FreeLibrary InterlockedIncrement GetCommState GetProfileStringW UnlockFile CallNamedPipeW FreeEnvironmentStringsA GetNumberFormatA GetCommandLineA FindResourceExA GlobalAlloc GetSystemWow64DirectoryW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW HeapDestroy CreateSemaphoreA EnumResourceLanguagesA GetModuleFileNameW GetCompressedFileSizeA GetSystemDirectoryA CreateActCtxA GetBinaryTypeW WritePrivateProfileStringW LCMapStringA CopyFileExW GetStartupInfoA SetThreadLocale GetStdHandle GetCPInfoExW GetLastError SetLastError GetProcAddress CreateNamedPipeA EnterCriticalSection LoadLibraryA OpenMutexA SetThreadIdealProcessor SetSystemTime FindNextFileA WriteProfileStringA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation FindNextFileW GetCurrentDirectoryA SetFileShortNameA FindAtomW UnregisterWaitEx DeleteFileA GetVolumeInformationW LocalFileTimeToFileTime lstrlenA GetPrivateProfileIntW GetThreadContext WideCharToMultiByte EncodePointer DecodePointer GetStartupInfoW InterlockedDecrement GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsSetValue GetCurrentThreadId TlsFree HeapValidate IsBadReadPtr LeaveCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate LoadLibraryW IsProcessorFeaturePresent OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree SetStdHandle FlushFileBuffers RaiseException CreateFileW CloseHandle

advapi32

InitiateSystemShutdownA AbortSystemShutdownA

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

8b781b88987500ec50c623ccf8aa6a8a_JaffaCakes118

kernel32

advapi32

winhttp

generic