d7e3682e60c4738765da9dc2a5ae49b4_JaffaCakes118

General

Target
d7e3682e60c4738765da9dc2a5ae49b4_JaffaCakes118
Size 294KB
Sample241208-tjd5datjgk
SHA256 7362b0c2916cd24388afb61a9a1e19c034fb3d71f218fd7764f2601bb17fbd77
MD5 d7e3682e60c4738765da9dc2a5ae49b4
SHA1 4c049992af07e568d379f226f3c4ff8ab89e5df5
SHA512 7435e26a4ef4c9f37ae8ac59b26b42cbfe240e9191351228e07200968b508129334623368e803d4e66a8c97599c4d322aae1df1b63ef1136f35b6cd895d0d2b1
SSDEEP 6144:dUF4kPbZ0SOpA+iHqJL6hcqOOhxxdeTr/ekId:4jFO/BL6hcgzxd6LK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d7e3682e60c4738765da9dc2a5ae49b4_JaffaCakes118

File Explorer

d7e3682e60c4738765da9dc2a5ae49b4_JaffaCakes118

.exe 294KB

d7e3682e60c4738765da9dc2a5ae49b4_JaffaCakes118

IMPHASH 7fd6de8b7ac14820eae90d7350ac48ac
SHA256 7362b0c2916cd24388afb61a9a1e19c034fb3d71f218fd7764f2601bb17fbd77
MD5 d7e3682e60c4738765da9dc2a5ae49b4
SHA1 4c049992af07e568d379f226f3c4ff8ab89e5df5
SHA512 7435e26a4ef4c9f37ae8ac59b26b42cbfe240e9191351228e07200968b508129334623368e803d4e66a8c97599c4d322aae1df1b63ef1136f35b6cd895d0d2b1
SSDEEP 6144:dUF4kPbZ0SOpA+iHqJL6hcqOOhxxdeTr/ekId:4jFO/BL6hcgzxd6LK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

16355

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jicivogew\lec_duvoleboc fozerirod\voyo-nona2.pdb

kernel32

GlobalDeleteAtom GetLocaleInfoA HeapAlloc InterlockedDecrement GetEnvironmentStringsW GetUserDefaultLCID AddConsoleAliasW SetEvent GetCommandLineA ReadFileScatter LeaveCriticalSection GetFileAttributesA FindNextVolumeW WriteConsoleW CreateActCtxA GetDevicePowerState ReleaseSemaphore GetProcAddress VerLanguageNameA GetProcessId LocalAlloc CreateTapePartition RemoveDirectoryW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA FindFirstVolumeA EndUpdateResourceA GetCurrentProcessId FindNextVolumeA lstrcpyA InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapCreate VirtualFree VirtualAlloc HeapReAlloc GetModuleHandleW ExitProcess WriteFile GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoW WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

d7e3682e60c4738765da9dc2a5ae49b4_JaffaCakes118

kernel32

generic