ccf66bd00babb14dfcbf7d1f13625c94_JaffaCakes118

General

Target
ccf66bd00babb14dfcbf7d1f13625c94_JaffaCakes118
Size 356KB
Sample241206-pg3bzaxjdw
SHA256 bb5d78931ceb7836f22fe7f18d5a75d6a6fb6bd4fa5698b6dbc8758c0d6724f3
MD5 ccf66bd00babb14dfcbf7d1f13625c94
SHA1 2a4c6e9245c473bc18f3dabcacbf59a9588f7ebd
SHA512 79db965b9995f327457d9de5ee37fe0ec656610e395c9b8f5541928e479c4932b937998cecc613bc10e5e36cbf89c7408b5e31a92f10cad989cbacd5d49ab830
SSDEEP 6144:uvVJBGUIyAZCup0M8PTBnBK3lCnlAgIhqeyoV7NBaz4k7xO21DON:udPLIyA5p25BOlum/Yey+BBCxO6ON
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccf66bd00babb14dfcbf7d1f13625c94_JaffaCakes118

File Explorer

ccf66bd00babb14dfcbf7d1f13625c94_JaffaCakes118

.exe 356KB

ccf66bd00babb14dfcbf7d1f13625c94_JaffaCakes118

IMPHASH 848a7504f9e97d3a5e7cf95079b638a5
SHA256 bb5d78931ceb7836f22fe7f18d5a75d6a6fb6bd4fa5698b6dbc8758c0d6724f3
MD5 ccf66bd00babb14dfcbf7d1f13625c94
SHA1 2a4c6e9245c473bc18f3dabcacbf59a9588f7ebd
SHA512 79db965b9995f327457d9de5ee37fe0ec656610e395c9b8f5541928e479c4932b937998cecc613bc10e5e36cbf89c7408b5e31a92f10cad989cbacd5d49ab830
SSDEEP 6144:uvVJBGUIyAZCup0M8PTBnBK3lCnlAgIhqeyoV7NBaz4k7xO21DON:udPLIyA5p25BOlum/Yey+BBCxO6ON
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gasat\gagaci\mebe\cuwoj\tog\m.pdb

kernel32

GetCommandLineW GetThreadContext SearchPathW SetInformationJobObject FindFirstChangeNotificationW lstrlenA CopyFileExW InterlockedIncrement GetSystemWindowsDirectoryW GetProfileStringW SetConsoleScreenBufferSize CallNamedPipeW FreeEnvironmentStringsA SetTapeParameters CreateNamedPipeW GetCompressedFileSizeW SetCommState CreateActCtxW FindResourceExA SetFileShortNameW LoadLibraryW SizeofResource GetSystemWow64DirectoryW HeapDestroy CreateSemaphoreA GetBinaryTypeA GetModuleFileNameW GetSystemDirectoryA GetStartupInfoW LCMapStringA GetPrivateProfileIntW GetLastError SetLastError GetProcAddress SetStdHandle LocalAlloc GetNumberFormatW FindAtomA FindNextFileA CreateIoCompletionPort HeapSetInformation GetCurrentDirectoryA OutputDebugStringA GetCPInfoExA FindAtomW DeleteFileW GetSystemTime InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer WriteFile GetStdHandle EnterCriticalSection LeaveCriticalSection RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW HeapValidate IsBadReadPtr HeapCreate SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeW LCMapStringW HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent FlushFileBuffers ReadFile RaiseException CreateFileW CloseHandle

Name

.text

Size

114KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

165KB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ccf66bd00babb14dfcbf7d1f13625c94_JaffaCakes118

kernel32

generic