d0b0f6e0bbc2b182e836b7d40fa46d0e_JaffaCakes118

General

Target
d0b0f6e0bbc2b182e836b7d40fa46d0e_JaffaCakes118
Size 11.4MB
Sample241207-e9wpsawpgs
SHA256 1f4a7eab9284a9e0f2ba200c3c9c113192b6626170cb9713263e5c9f45671644
MD5 d0b0f6e0bbc2b182e836b7d40fa46d0e
SHA1 4832ba6cb5d2f38e729603de44f0c057cd5ec8e0
SHA512 798ab4f216bc335678ab7ebb706303fd1b94529cfc7605c276917fd0fa461754cc211fdcf9d9f0c917a125f2d7891d94e93c26c97cc90e861fb61cc11004cad5
SSDEEP 12288:uUR4+0lGrUPDHQahTzrdCcrFy55555555555555555555555555555555555555H:ul+PrmrXrd1p
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0b0f6e0bbc2b182e836b7d40fa46d0e_JaffaCakes118

File Explorer

d0b0f6e0bbc2b182e836b7d40fa46d0e_JaffaCakes118

.exe 11.4MB

d0b0f6e0bbc2b182e836b7d40fa46d0e_JaffaCakes118

IMPHASH d0a8c3f24685503ba25bd76f34c13b9e
SHA256 1f4a7eab9284a9e0f2ba200c3c9c113192b6626170cb9713263e5c9f45671644
MD5 d0b0f6e0bbc2b182e836b7d40fa46d0e
SHA1 4832ba6cb5d2f38e729603de44f0c057cd5ec8e0
SHA512 798ab4f216bc335678ab7ebb706303fd1b94529cfc7605c276917fd0fa461754cc211fdcf9d9f0c917a125f2d7891d94e93c26c97cc90e861fb61cc11004cad5
SSDEEP 12288:uUR4+0lGrUPDHQahTzrdCcrFy55555555555555555555555555555555555555H:ul+PrmrXrd1p
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6816

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gex15\soho-barot_fi.pdb

kernel32

CallNamedPipeA SetWaitableTimer InterlockedIncrement GetQueuedCompletionStatus GetCommState InterlockedDecrement SetEvent FreeEnvironmentStringsA CreateNamedPipeW GetNumberFormatA ReadConsoleOutputA GetCommandLineA SetProcessPriorityBoost GetSystemTimes GetPrivateProfileIntA GetSystemDirectoryW GetConsoleAliasExesLengthW HeapCreate TerminateProcess FileTimeToSystemTime EnumResourceLanguagesA GetModuleFileNameW GetCompressedFileSizeA lstrlenW GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetCPInfoExW CopyFileExW GetLastError GetCurrentDirectoryW GetThreadLocale GetProcAddress SetStdHandle EnterCriticalSection LoadLibraryA OpenMutexA CreateSemaphoreW LocalAlloc WritePrivateProfileStringA GetProfileStringA HeapWalk FindAtomA GetModuleHandleA FindFirstChangeNotificationA FreeEnvironmentStringsW FindNextFileW WriteProfileStringW SetFileShortNameA TlsAlloc LocalSize FindAtomW DeleteFileW GetSystemTime LCMapStringW CopyFileExA GetVolumeInformationW FreeLibraryAndExitThread SetThreadContext MoveFileA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter SetHandleCount GetStdHandle GetFileType GetCurrentProcess IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

advapi32

InitiateSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

d0b0f6e0bbc2b182e836b7d40fa46d0e_JaffaCakes118

kernel32

advapi32

generic