ad5db0b3ec54bebc211561a28f2565e8_JaffaCakes118

General

Target
ad5db0b3ec54bebc211561a28f2565e8_JaffaCakes118
Size 477KB
Sample241128-ya98nsxpg1
SHA256 7d9460b084a92d0c840465c39861f3f028d7d1880f9b5a34d52976f9dd820db7
MD5 ad5db0b3ec54bebc211561a28f2565e8
SHA1 4ae9a2b754fabd1dc4a8baee8d76c884b349b8b9
SHA512 03280433899316eb72a6f9ccc518f597ddc7acf294b3408acdcbc796f505eb3710178a8df9f7b3188c3531dfdba516a0af1466abc812ef72124de2e8f4eeff44
SSDEEP 12288:yNQpZYwAgRJyOSUBPlr7n6i9rhIqQgmZP2R+AMp+GPEFgUeYpRKY:WvgcQrdiXgm0+1p+GPELsY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad5db0b3ec54bebc211561a28f2565e8_JaffaCakes118

File Explorer

ad5db0b3ec54bebc211561a28f2565e8_JaffaCakes118

.exe 477KB

ad5db0b3ec54bebc211561a28f2565e8_JaffaCakes118

IMPHASH 1dd2fbc6a5c2e2fc6f774863c78cf7c8
SHA256 7d9460b084a92d0c840465c39861f3f028d7d1880f9b5a34d52976f9dd820db7
MD5 ad5db0b3ec54bebc211561a28f2565e8
SHA1 4ae9a2b754fabd1dc4a8baee8d76c884b349b8b9
SHA512 03280433899316eb72a6f9ccc518f597ddc7acf294b3408acdcbc796f505eb3710178a8df9f7b3188c3531dfdba516a0af1466abc812ef72124de2e8f4eeff44
SSDEEP 12288:yNQpZYwAgRJyOSUBPlr7n6i9rhIqQgmZP2R+AMp+GPEFgUeYpRKY:WvgcQrdiXgm0+1p+GPELsY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8503

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kiv25\behatokipite55_ridahuyexij-becipuzocud co.pdb

kernel32

SetProcessAffinityMask WriteConsoleInputW lstrlenA GetConsoleAliasesLengthW EnumDateFormatsExW FindResourceExW WriteConsoleOutputCharacterA EndUpdateResourceW GetUserDefaultLCID SetConsoleScreenBufferSize GetComputerNameW SetEvent GetSystemDefaultLCID GetProcessHeap ReadConsoleW SetFileTime WriteFile CreateActCtxW InitializeCriticalSection GetVolumePathNameW ActivateActCtx GetConsoleCP GlobalFindAtomA TerminateThread ReadConsoleInputA GetSystemWindowsDirectoryA ReadConsoleOutputW SetConsoleCP InterlockedPopEntrySList DnsHostnameToComputerNameW GetConsoleAliasW VerifyVersionInfoA WriteConsoleW GetMailslotInfo GetTimeZoneInformation CreateActCtxA SetConsoleTitleA GetConsoleOutputCP InterlockedExchange GetLastError GetLongPathNameW SetLastError GetProcAddress GetConsoleDisplayMode EnterCriticalSection LoadLibraryA CreateTapePartition GetProfileStringA WaitForMultipleObjects SetEnvironmentVariableA GetModuleHandleA UpdateResourceW CancelTimerQueueTimer BuildCommDCBA VirtualProtect GetFileAttributesExW GetCPInfoExA SetCalendarInfoA GetVersionExA FindFirstVolumeW GetCurrentProcessId GetPrivateProfileSectionW GlobalReAlloc GetSystemTime AreFileApisANSI CreateThread CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetStartupInfoW GetModuleHandleW Sleep ExitProcess GetStdHandle GetModuleFileNameA LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte RtlUnwind HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle WriteConsoleA SetStdHandle

user32

GetAltTabInfoA RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

ad5db0b3ec54bebc211561a28f2565e8_JaffaCakes118

kernel32

user32

generic