b449be414eabb477f6681adb617b72d5_JaffaCakes118

General

Target
b449be414eabb477f6681adb617b72d5_JaffaCakes118
Size 12.5MB
Sample241130-bh58csvpet
SHA256 3efe22a84b570ddcb8fcb1e4669706957a1cadc7c744e9f7f767032fba94ce16
MD5 b449be414eabb477f6681adb617b72d5
SHA1 5b6e21ba01ddbdd3bf99534c2bda2716b42a74c1
SHA512 c1f3df85fd46e8a4feae957ce8190bc741c30df4882e771de1874a1f43cc2707eeef83b4230b75d06d2acbe2bdafeb73761baadc66233b270a68cfefd1ac58a8
SSDEEP 6144:DesoFeYHECHsLsx6mihb12P5qpWV0m68jM7LjmpeM:Dnu/HECz6S5QWlnqOpe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b449be414eabb477f6681adb617b72d5_JaffaCakes118

File Explorer

b449be414eabb477f6681adb617b72d5_JaffaCakes118

.exe 12.5MB

b449be414eabb477f6681adb617b72d5_JaffaCakes118

IMPHASH d31cc935cd1c6935cd48a10ef09a7414
SHA256 3efe22a84b570ddcb8fcb1e4669706957a1cadc7c744e9f7f767032fba94ce16
MD5 b449be414eabb477f6681adb617b72d5
SHA1 5b6e21ba01ddbdd3bf99534c2bda2716b42a74c1
SHA512 c1f3df85fd46e8a4feae957ce8190bc741c30df4882e771de1874a1f43cc2707eeef83b4230b75d06d2acbe2bdafeb73761baadc66233b270a68cfefd1ac58a8
SSDEEP 6144:DesoFeYHECHsLsx6mihb12P5qpWV0m68jM7LjmpeM:Dnu/HECz6S5QWlnqOpe
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vopoj-todacib\d.pdb

kernel32

GetCommandLineW GetThreadContext SearchPathW lstrlenA FindResourceExW CallNamedPipeA InterlockedIncrement GetQueuedCompletionStatus GetCommState GetProfileStringW FreeEnvironmentStringsA GetNumberFormatA CreateActCtxW GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW GetVolumeInformationA LoadLibraryW GetSystemWow64DirectoryW GetSystemWindowsDirectoryA HeapDestroy GetBinaryTypeA GetCompressedFileSizeA QueryInformationJobObject GetStartupInfoW LCMapStringA GetPrivateProfileIntW SetThreadLocale FreeLibraryAndExitThread GetLastError SetLastError GetProcAddress CreateNamedPipeA SetStdHandle LoadLibraryA CreateSemaphoreW FindAtomA GetModuleFileNameA FindNextFileA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation GetCurrentDirectoryA GetCPInfoExA FindAtomW UnregisterWaitEx GetSystemTime CopyFileExA DeleteFileA InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW WriteFile GetStdHandle RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr HeapCreate EnterCriticalSection LeaveCriticalSection SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode OutputDebugStringA WriteConsoleW OutputDebugStringW GetStringTypeW MultiByteToWideChar LCMapStringW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent RaiseException CreateFileW CloseHandle FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

b449be414eabb477f6681adb617b72d5_JaffaCakes118

kernel32

generic