8ea72364aef6738debc38a72456ae875_JaffaCakes118

General

Target
8ea72364aef6738debc38a72456ae875_JaffaCakes118
Size 677KB
Sample241104-cqjvrs1fml
SHA256 5d78cfec3d53645a049ddf865d760f4430fd8e6b6958821326ee194f927278cb
MD5 8ea72364aef6738debc38a72456ae875
SHA1 67fc11482612c3efda5a7d9111fc0ce8995cb806
SHA512 7c48f28000528a6ca8d481de573dd7317fa201979e17e4dcf29a8eb82e1ec891ef3ca3aefc9a5e38b17beb9b8a716c4fb8c0ab4e698e74c588dcf38e270c810e
SSDEEP 12288:kHKWvRxdYFqtaY6PeiDaO25icixdfA/d5Fd2WHZXCGO73oxzbZei2r:kHK+cgH/GaUcGhinZXCGO73Wzbdq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ea72364aef6738debc38a72456ae875_JaffaCakes118

File Explorer

8ea72364aef6738debc38a72456ae875_JaffaCakes118

.exe 677KB

8ea72364aef6738debc38a72456ae875_JaffaCakes118

IMPHASH 26b2a22c1afb78875d9384441bc03abe
SHA256 5d78cfec3d53645a049ddf865d760f4430fd8e6b6958821326ee194f927278cb
MD5 8ea72364aef6738debc38a72456ae875
SHA1 67fc11482612c3efda5a7d9111fc0ce8995cb806
SHA512 7c48f28000528a6ca8d481de573dd7317fa201979e17e4dcf29a8eb82e1ec891ef3ca3aefc9a5e38b17beb9b8a716c4fb8c0ab4e698e74c588dcf38e270c810e
SSDEEP 12288:kHKWvRxdYFqtaY6PeiDaO25icixdfA/d5Fd2WHZXCGO73oxzbZei2r:kHK+cgH/GaUcGhinZXCGO73Wzbdq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6976

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\lojocatohan\jona\2 yay\33-bejutebey\hozico.pdb

kernel32

HeapReAlloc GetLocaleInfoA LoadResource InterlockedIncrement GetEnvironmentStringsW AddConsoleAliasW SetEvent GetSystemTimeAsFileTime GetCommandLineA WriteFileGather CreateActCtxW EnumResourceTypesA LeaveCriticalSection GetFileAttributesA ReadFile GetDevicePowerState GetProcAddress VerLanguageNameA FreeUserPhysicalPages WriteConsoleA GetProcessId LocalAlloc RemoveDirectoryW GlobalGetAtomNameW WaitForMultipleObjects GetModuleFileNameA GetModuleHandleA UpdateResourceW EraseTape GetStringTypeW OpenSemaphoreW ReleaseMutex EndUpdateResourceA LocalSize FindFirstVolumeW FindNextVolumeA lstrcpyW HeapAlloc GetStartupInfoA DeleteCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle SetHandleCount GetFileType GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA CloseHandle CreateFileA

user32

GetCursorPos

Sharing

General

Malware Config

Signatures

File Explorer

8ea72364aef6738debc38a72456ae875_JaffaCakes118

kernel32

user32

generic