c12142a8710fe99c29101f78dd31d5d7_JaffaCakes118

General

Target
c12142a8710fe99c29101f78dd31d5d7_JaffaCakes118
Size 13.5MB
Sample241204-gla5aavket
SHA256 2dd88c2cf5f3ad49a46e6cfb88ec470423992ea5365fb55f7890af7e3d704662
MD5 c12142a8710fe99c29101f78dd31d5d7
SHA1 4c638ca8cdb0c581ba1323101b485973d724b917
SHA512 0944f49c54d4f488d55a477ff3767c72a3807148718e63745cf0795b570be48a7baf6fb3d5f19747918897c5cce588d1fcc60bbd6b91bfdc85de0546d9b64100
SSDEEP 49152:RT81MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMk:RT8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c12142a8710fe99c29101f78dd31d5d7_JaffaCakes118

File Explorer

c12142a8710fe99c29101f78dd31d5d7_JaffaCakes118

.exe 13.5MB

c12142a8710fe99c29101f78dd31d5d7_JaffaCakes118

IMPHASH 03c38f22c8ecb27668831dee75bcf888
SHA256 2dd88c2cf5f3ad49a46e6cfb88ec470423992ea5365fb55f7890af7e3d704662
MD5 c12142a8710fe99c29101f78dd31d5d7
SHA1 4c638ca8cdb0c581ba1323101b485973d724b917
SHA512 0944f49c54d4f488d55a477ff3767c72a3807148718e63745cf0795b570be48a7baf6fb3d5f19747918897c5cce588d1fcc60bbd6b91bfdc85de0546d9b64100
SSDEEP 49152:RT81MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMk:RT8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\safunekeweda91\fehejocucof kuwarixicihi-binogul98\haninizim.pdb

kernel32

GetComputerNameA SetFilePointer lstrlenA GetConsoleAliasesLengthW CopyFileExW GetConsoleAliasExesA FindResourceExW MapUserPhysicalPages FreeLibrary InterlockedIncrement InterlockedDecrement ZombifyActCtx GetNamedPipeHandleStateA GlobalLock GetProfileSectionA SetComputerNameW GetFileAttributesExA FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig LocalFlags GetConsoleAliasesLengthA GetWindowsDirectoryA SetCommState TlsSetValue GetEnvironmentStrings GlobalAlloc LoadLibraryW _hread GetCalendarInfoW GetSystemWow64DirectoryW GetSystemWindowsDirectoryA GetSystemTimeAdjustment InitAtomTable GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile CompareStringW SetConsoleTitleA VirtualUnlock LCMapStringA CreateDirectoryA ReleaseActCtx GetFileSizeEx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW GetCurrentDirectoryW GetProcAddress VerLanguageNameA SetFirmwareEnvironmentVariableW CreateNamedPipeA SetStdHandle BuildCommDCBW GetLocalTime LoadLibraryA CreateSemaphoreW SetConsoleCtrlHandler WriteProfileSectionW Process32NextW WriteProfileStringA VirtualProtect GetCPInfoExA _lopen FindAtomW GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId UnregisterWaitEx ReadConsoleOutputCharacterW AreFileApisANSI CommConfigDialogW GetModuleHandleA GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError LeaveCriticalSection EnterCriticalSection GetFileType WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection SetHandleCount GetStdHandle QueryPerformanceCounter GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

user32

GetMessageTime GetMenuInfo

Sharing

General

Malware Config

Signatures

File Explorer

c12142a8710fe99c29101f78dd31d5d7_JaffaCakes118

kernel32

user32

generic