d6d1db29d6685c7254f3d24fcb5d918b_JaffaCakes118

General

Target
d6d1db29d6685c7254f3d24fcb5d918b_JaffaCakes118
Size 10.5MB
Sample241208-nl6phsskhs
SHA256 5c6262f8a6ce018b6eb32110edc0d2bdc96dfd2be9abbda9d03f10debd44d89c
MD5 d6d1db29d6685c7254f3d24fcb5d918b
SHA1 3d0b536bbebf8b982570a7f020419b52eec8abc3
SHA512 6cf3fa8c045b1bf76b6a47f3901898c30390665e7e052d78bf3df4fb8477a1326bd10ba1578cf4d77a56284caf9d593b6bacb298a50c4cf822b5ca09e86e7cf2
SSDEEP 98304:LYTPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPf:L
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6d1db29d6685c7254f3d24fcb5d918b_JaffaCakes118

File Explorer

d6d1db29d6685c7254f3d24fcb5d918b_JaffaCakes118

.exe 10.5MB

d6d1db29d6685c7254f3d24fcb5d918b_JaffaCakes118

IMPHASH 438d3f220d4b15a7dcd7e61e8e894ed4
SHA256 5c6262f8a6ce018b6eb32110edc0d2bdc96dfd2be9abbda9d03f10debd44d89c
MD5 d6d1db29d6685c7254f3d24fcb5d918b
SHA1 3d0b536bbebf8b982570a7f020419b52eec8abc3
SHA512 6cf3fa8c045b1bf76b6a47f3901898c30390665e7e052d78bf3df4fb8477a1326bd10ba1578cf4d77a56284caf9d593b6bacb298a50c4cf822b5ca09e86e7cf2
SSDEEP 98304:LYTPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPf:L
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xofukuwuve\63\xukoxu_fejonofuza\copoh30\vicoyorixu tibi.pdb

kernel32

HeapReAlloc SetVolumeLabelA CreateFileA GetFileSize SetFilePointer lstrlenA WritePrivateProfileStructA TlsGetValue SetLocalTime GetNumberOfConsoleInputEvents MapUserPhysicalPages InterlockedDecrement SetEnvironmentVariableW CreateDirectoryW GetProfileSectionA WaitForSingleObject WriteConsoleInputA SignalObjectAndWait SetVolumeMountPointW FreeEnvironmentStringsA GetModuleHandleW LocalFlags GetPrivateProfileStringW GetConsoleTitleA ReadConsoleW GetWindowsDirectoryA WriteFile SetCommState CreateDirectoryExW GetDriveTypeA TlsSetValue FindResourceExA GlobalAlloc AddRefActCtx GetPrivateProfileStructW SetSystemTimeAdjustment GetVersionExW GetComputerNameExA Beep VerifyVersionInfoA GetBinaryTypeA WritePrivateProfileSectionW GetAtomNameW FileTimeToSystemTime GetTempFileNameW CompareStringW GlobalUnlock LCMapStringA VerifyVersionInfoW InterlockedExchange SetCurrentDirectoryA GetLastError GetProcAddress CreateNamedPipeA SetStdHandle SetComputerNameA GetPrivateProfileStringA SetFileApisToOEM OpenWaitableTimerA Process32FirstW OpenMutexA SetCalendarInfoW SetConsoleOutputCP AddAtomW QueryDosDeviceW WriteProfileSectionW GetCommMask EnumResourceTypesW GetThreadPriority SetConsoleTitleW QueryMemoryResourceNotification FindNextFileW GetStringTypeW RequestWakeupLatency BuildCommDCBA GetCurrentDirectoryA GetConsoleCursorInfo ScrollConsoleScreenBufferA OpenSemaphoreW DeleteTimerQueueTimer FindActCtxSectionStringW ReadConsoleOutputCharacterW InterlockedPushEntrySList GetVolumeInformationW CloseHandle CreateFileW LCMapStringW LoadLibraryW GetModuleFileNameW FileTimeToDosDateTime InterlockedIncrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer DeleteFileA MultiByteToWideChar GetCommandLineW HeapSetInformation GetStartupInfoW HeapValidate IsBadReadPtr RaiseException RtlUnwind InitializeCriticalSectionAndSpinCount GetFileType WideCharToMultiByte GetConsoleCP GetConsoleMode TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle HeapCreate HeapAlloc GetModuleFileNameA HeapSize HeapQueryInformation HeapFree IsProcessorFeaturePresent WriteConsoleW OutputDebugStringA OutputDebugStringW FlushFileBuffers

user32

GetCursorInfo GetMenuInfo GetComboBoxInfo GetMenuBarInfo

advapi32

InitiateSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

d6d1db29d6685c7254f3d24fcb5d918b_JaffaCakes118

kernel32

user32

advapi32

generic